Computer Security
[EN] no-pyccku

Oracle GlassFish Server authentication bypass
updated since 12.05.2011
SecurityVulns ID:11668
Threat Level:
Description:Unauthenticated administration console access via HTTP TRACE requests.
CVE:CVE-2011-1511 (Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration.)
Original documentdocument[email protected], NGS00106 Technical Advisory: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability (09.01.2012)
 documentCORE SECURITY TECHNOLOGIES ADVISORIES, CORE-2010-1118: Oracle GlassFish Server Administration Console Authentication Bypass (12.05.2011)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod