|
BEA WebLogic Server/Express/Integration Application Migration Security Policy Weakness
The affected products supported undocumented extensions for the Servlet 2.3 specification. These extensions included additional URL mapping syntax for web applications. Since these extensions are no longer supported in recent versions of the software, role mappings and security policies may not carry over when web applications are migrated. |
|
|
Privacy Statement |
