CVE:CVE-2007-2705
CNNVD:CNNVD-200705-323
BEA WebLogic Integration SP1和WebLogic Workshop 中的Test View Console存在目录穿越漏洞。当"在exploded format中被部署时"，远程攻击者可以借助未明向量，列出WebLogic Workshop Directory (wlwdir)母目录。
solution:Upgrade bea weblogic_integration to a higher version than 9.2,and avoid the version 9.2; Upgrade bea weblogic_workshop to a higher version than 8.1:sp2,8.1:sp3,8.1:sp4,8.1:sp5,8.1:sp6,and avoid the version 8.1:sp2,8.1:sp3,8.1:sp4,8.1:sp5,8.1:sp6