CCE

CCE-17478-9

Platform: weblogicserver11g

Date: (C)2011-10-07   (M)2022-10-10

Set the "Check Roles and Policies" appropriately.

Parameter:

(1) AllWebApplicationsAndEJBs/WebApplicationsAndEJBsProtectedInDD

Technical Mechanism:

(1) via the Administration Console, Security Realm > Name of the Active Realm > Configuration > General > Advanced > Check Roles and Policies setting

CCSS Severity:		CCSS Metrics:
CCSS Score :		Attack Vector:
Exploit Score:		Attack Complexity:
Impact Score:		Privileges Required:
Severity:		User Interaction:
Vector:		Scope:
		Confidentiality:
		Integrity:
		Availability:

References:

Resource Id	Reference
Other WebLogic Documentation	Oracle�� Fusion Middleware Securing Resources Using Roles and Policies for Oracle WebLogic Server 11g Release 1 (10.3.1) E13747-01. link down to 4.2.1, "Understanding the Check Roles and Policies Setting" and 4.2.2, "Understanding the When Deploying Web Applications or EJBs Setting"