Lucene search
PRIOn knowledge basePRION:CVE-2023-28462HistoryMar 30, 2023 - 8:15 p.m.
Design/Logic Flaw
2023-03-3020:15:00
PRIOn knowledge base
www.prio-n.com
3
jndi
remote attackers
payara server
code execution
A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 (Enterprise), 5.20.0 and newer (Enterprise), and 5.2020.1 and newer (Community), when Java 1.8u181 and earlier is used, allows remote attackers to load malicious code on the server once a JNDI directory scan is performed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| payara_server | ge | 4.1.2.191 | |
| payara_server | le | 5.0.0 | |
| payara_server | ge | 5.20.0 | |
| payara_server | ge | 5.2020.1 |
Related
cvelist
cvelist
CVE-2023-28462
2023-03-30 00:00:00
github
github
osv
osv
nvd
nvd
CVE-2023-28462
2023-03-30 20:15:07
cve
cve
CVE-2023-28462
2023-03-30 20:15:07