Oracle GlassFish Server authentication bypass updated since 12.05.2011
Published:		09.01.2012
Source:		BUGTRAQ
SecurityVulns ID:		11668
Type:		remote
Level:		5/10
Description:		Unauthenticated administration console access via HTTP TRACE requests.

CVE:

CVE-2011-1511 (Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration.)

Original document		Research@NGSSecure, NGS00106 Technical Advisory: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability (09.01.2012)
		CORE SECURITY TECHNOLOGIES ADVISORIES, CORE-2010-1118: Oracle GlassFish Server Administration Console Authentication Bypass (12.05.2011)

Discuss:

Read or add your comments to this news (0 comments)