http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_54.00.jsp

 > Security Advisory:(BEA04-54.00)

 > From: BEA Systems Inc.

 > Minor Subject: Patches available to prevent user impersonation.

 > Product(s) Affected: WebLogic Server and WebLogic Express

A vulnerability was reported in WebLogic Server and WebLogic Express affecting sites that 
use custom trust managers.

If a WebLogic Server is validating a certificate chain, the vulnerability may occur either 
during an inbound 2-way SSL request (i.e., when the user's certificate is validated) or 
during an outbound SSL request (i.e., when the remote server's certificate chain is 
validated), the report said.

It is reported that a validated and accepted certificate chain may be accepted even when 
the custom trust manager rejects the chain.  As a result, a remote user may be able to use 
two-way SSL to impersonate a target user or, when outbound SSL is used, impersonate a 
target server.

The following versions are affected:

8.1 Service Pack 2 and prior
7.0 released Service Pack 4 and prior.


For WebLogic Server and WebLogic Express version 8.1, the vendor recommends that you 
upgrade to SP2 or SP3 and install the following patch:

ftp://ftpna.beasys.com/pub/releases/security/CR129371_81sp2.jar

For WebLogic Server and WebLogic Express version 7.0, the vendor recommends that you 
upgrade to SP5.


 > Threat level: Medium - A remote attacker, when 2-way SSL is used with a custom trust
 > manager, might be able to exploit this vulnerability.
 > Severity: High - A successful attacker could impersonate a system administrator or a
 > remote server.