A vulnerability has been reported in Oracle BEA WebLogic Portal, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to an unspecified error. No further details are currently available.

The vulnerability is reported in the following versions:
* WebLogic Portal 10.3 GA, on all platforms
* WebLogic Portal 10.2 GA, on all platforms
* WebLogic Portal 10.0 released through Maintenance Pack 1, on all platforms
* WebLogic Portal 9.2 released through Maintenance Pack 3, on all platforms
* WebLogic Portal 8.1 released through Service Pack 6, on all platforms

Solution
Apply the patches (see vendor advisory for details).

Provided and/or discovered by
Reported by the vendor.

Original Advisory
BEA:
https://support.bea.com/application_content/product_portlets/securityadvisories/2808.html

Deep Links
Links available in Customer Area