Unscored severity · published Jan 23, 2007
CVE-2007-0433
Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated users to access the server even after the account has been disabled.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Aqualogic Service Bus · Bea
2.0; 2.0; 2.0; 2.1; 2.1; 2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0433
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0433
Vendor Advisory
http://dev2dev.bea.com/pub/advisory/221
osvdb.org
http://osvdb.org/32861
Vendor Advisory
http://secunia.com/advisories/23786
Vendor Advisory
http://securitytracker.com/id?1017524
www.securityfocus.com
http://www.securityfocus.com/bid/22082
More from Aqualogic Service Bus
–
CVE-2007-0432
BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properly reject malformed request messages to a proxy service, which might allow remote attackers to bypass authorization…