CVE-2010-4438

Removed by vendor...

CVE-2010-4438: Undefined Security Weakness

Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service JMS...

PT-2011-1542

Name of the Vulnerable Software and Affected Versions Oracle GlassFish versions 2.1 through 3.0.1 Java System Message Queue version 4.1 Description The issue affects confidentiality, integrity, and availability, and is related to Java Message Service JMS, allowing local users to exploit it...

Oracle GlassFish Server Administration Console Default Credentials

It is possible to log into the remote Oracle GlassFish administration console by providing default credentials. Knowing these, an attacker can gain administrative control of the affected application server and, for example, install hostile applets. %NASLMINLEVEL 70300 C Tenable Network Security,...