BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable managed servers, which might allow attackers to bypass intended restrictions, a different vulnerability than CVE-2007-0426.
| Software | From | Fixed in |
|---|---|---|
| bea / weblogic_server | 9.1 | 9.1.x |