Secunia Security Advisory SA11356 – A security issue has been discovered in BEA WebLogic Server and WebLogic Express, which may lead to inappropriate privileges being granted. The problem arises if a parent group is deleted because child groups remains a member, after the parent group is deleted. If a parent group is re-created and granted higher privileges, those privileges are inherited by any group, which was a member of the group before being deleted. Versions affected are Server and Express 7.x through 8.x.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33078/sa11356.txt
Source: https://packetstormsecurity.com/files/33078/Secunia-Security-Advisory-11356.html