CVE:CVE-2007-4616
CNNVD:CNNVD-200708-500
BEA WebLogic Server 7.0 Gold 至 SP7, 8.1 Gold 至 SP6, 9.0, 9.1, 9.2 Gold 至 MP1, 和 10.0 版本的SSL服务器执行程序有事在没有其他密码与服务器和客户端是相匹配时，有事会选择无效密码，这会允许远程攻击者插入会话。
solution:Upgrade bea weblogic_server to a higher version than 7.0,7.0:sp1,7.0:sp2,7.0:sp3,7.0:sp4,7.0:sp5,7.0:sp6,7.0:sp7,8.1,8.1:sp1,8.1:sp2,8.1:sp3,8.1:sp4,8.1:sp5,8.1:sp6,9.0,9.1,9.2,9.2:mp1,10.0,and avoid the version 7.0,7.0:sp1,7.0:sp2,7.0:sp3,7.0:sp4,7.0:sp5,7.0:sp6,7.0:sp7,8.1,8.1:sp1,8.1:sp2,8.1:sp3,8.1:sp4,8.1:sp5,8.1:sp6,9.0,9.1,9.2,9.2:mp1,10.0