BEA WebLogic Server and WebLogic Express 9.0 causes new security providers to appear active even if they have not been activated by a server reboot, which could cause an administrator to perform inappropriate, security-relevant actions.Referenceshttp://www.vupen.com/english/advisories/2006/0313http://www.osvdb.org/22773https://exchange.xforce.ibmcloud.com/vulnerabilities/24298http://securitytracker.com/id?1015528http://secunia.com/advisories/18592http://dev2dev.bea.com/pub/advisory/173http://www.securityfocus.com/bid/16358
