Computer Security
[EN] securityvulns.ru no-pyccku


Oracle GlassFish Server authentication bypass
updated since 12.05.2011
Published:09.01.2012
Source:
SecurityVulns ID:11668
Type:remote
Threat Level:
5/10
Description:Unauthenticated administration console access via HTTP TRACE requests.
CVE:CVE-2011-1511 (Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Products Suite 2.1.1 and 3.0.1 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration.)
Original documentdocumentResearch@NGSSecure, NGS00106 Technical Advisory: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability (09.01.2012)
 documentCORE SECURITY TECHNOLOGIES ADVISORIES, CORE-2010-1118: Oracle GlassFish Server Administration Console Authentication Bypass (12.05.2011)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod