A security issue has been discovered in BEA WebLogic, potentially allowing unauthorised users to access affected web applications. Due to improper filtering of data, an asterisk may be used in a spot to allow for a random user to get loaded into a role. The issue affects WebLogic Server and WebLogic Express version 8.1 and 7.0.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33672/BEA04_64.00.html
Source: https://packetstormsecurity.com/files/33672/BEA-Systems-Security-Advisory-04-64.00.html