CVE-2014-2609: Improper Authentication

The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to execute arbitrary code via a session on TCP port 10001, aka ZDI-CAN-2116...

PT-2014-4813

Name of the Vulnerable Software and Affected Versions HP Executive Scorecard versions 9.40 through 9.41 Description The Java Glassfish Admin Console does not require authentication, allowing remote attackers to execute arbitrary code via a session on TCP port 10001. Recommendations For versions...