CVE-2007-0433
Last modified
CVE-2007-0433 is a vulnerability of currently unknown severity. Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated users to access the server even after the account has been disabled.. EPSS estimates a 1.21% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 through 2.1 SP1, and 2.2, when using Active Directory LDAP for authentication, allows remote authenticated users to access the server even after the account has been disabled.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Bea | Aqualogic Service Bus | 2.0 |
| Bea | Aqualogic Service Bus | 2.1 |
| Bea | Aqualogic Service Bus | 2.2 |
References
- http://dev2dev.bea.com/pub/advisory/221Vendor Advisory
- http://secunia.com/advisories/23786Vendor Advisory
- http://securitytracker.com/id?1017524Vendor Advisory
- http://dev2dev.bea.com/pub/advisory/221Vendor Advisory
- http://secunia.com/advisories/23786Vendor Advisory
- http://securitytracker.com/id?1017524Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-0433?
How severe is CVE-2007-0433?
How do I fix CVE-2007-0433?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-0427Stack-based buffer overflow in Microsoft Help Workshop 4.03.…
- CVE-2007-0428Unspecified vulnerability in the chtbl_lookup function in ha…
- CVE-2007-0429DivXBrowserPlugin (aka DivX Web Player) npdivx32.dll, as dis…
- CVE-2007-0430The shared_region_map_file_np function in Apple Mac OS X 10.…
- CVE-2007-0431AVM Fritz!Box 7050, and possibly other product models, allow…
- CVE-2007-0432BEA AquaLogic Service Bus 2.0, 2.1, and 2.5 does not properl…
- CVE-2007-0434BEA AquaLogic Enterprise Security 2.0 through 2.0 SP2, 2.1 t…
- CVE-2007-0435T-Com Speedport 500V routers with firmware 1.31 allow remote…
- CVE-2007-0436Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Ins…
- CVE-2007-0437Multiple cross-site scripting (XSS) vulnerabilities in the s…
- CVE-2007-0441Unspecified vulnerability in HP OpenView Network Node Manage…
- CVE-2007-0442Unspecified vulnerability in IBM OS/400 R530 and R535 has un…
Are you affected by CVE-2007-0433?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
