Lucene search

GoogleOSV:GHSA-XC93-587G-MXM7

HistoryMar 30, 2023 - 9:30 p.m.

Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed

2023-03-3021:30:21

Google

osv.dev

payara server

remote attackers

malicious code

jndi directory scan

vulnerability

remote code execution

orb listener

java 1.8u181

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

61.6%

JSON

A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 (Enterprise), 5.20.0 and newer (Enterprise), and 5.2020.1 and newer (Community), when Java 1.8u181 and earlier is used, allows remote attackers to load malicious code on the server once a JNDI directory scan is performed.

References

blog.payara.fish/vulnerability-affecting-server-environments-on-java-1.8-on-updates-lower-than-1.8u191

github.com/payara/Payara

nvd.nist.gov/vuln/detail/CVE-2023-28462

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

61.6%

JSON

Related for OSV:GHSA-XC93-587G-MXM7