CVE-2004-1756

BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejects it, which allows remote attackers to spoof other users or servers.

• http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_54.00.jspPatch, Vendor Advisory
• http://secunia.com/advisories/11358Patch, Vendor Advisory
• http://securitytracker.com/id?1009765Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/566390Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/10132Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15862
• http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_54.00.jspPatch, Vendor Advisory
• http://secunia.com/advisories/11358Patch, Vendor Advisory
• http://securitytracker.com/id?1009765Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/566390Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/10132Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15862

Published

Apr 13, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1750RealVNC 4.0 and earlier allows remote attackers to cause a d…
• CVE-2004-1751Ground Control II: Operation Exodus 1.0.0.7 and earlier allo…
• CVE-2004-1752Stack-based buffer overflow in Gaucho 1.4 Build 145 allows r…
• CVE-2004-1753The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozi…
• CVE-2004-1754The DNS proxy (DNSd) for multiple Symantec Gateway Security …
• CVE-2004-1755The Web Services fat client for BEA WebLogic Server and Expr…
• CVE-2004-1757BEA WebLogic Server and Express 8.1, SP1 and earlier, stores…
• CVE-2004-1758BEA WebLogic Server and WebLogic Express version 8.1 up to S…
• CVE-2004-1759Cisco voice products, when running the IBM Director Agent on…
• CVE-2004-1760The default installation of Cisco voice products, when runni…
• CVE-2004-1761Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows at…
• CVE-2004-1762Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for…