CVE-2018-14324: Use of Hard-coded Credentials

The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password of admin for the admin account. This allows remote attackers to obtain potentially sensitive information, perform database operations, or manipulate the demo via a JMX RMI session, aka a...

PT-2018-12439

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Open Source Edition version 5.0 Description The issue allows remote attackers to obtain potentially sensitive information, perform database operations, or manipulate the demo via a JMX RMI session. This is due to the demo...