Oracle GlassFish Enterprise Server REST Interface Cross Site Request Forgery (CVE-2012-0550)

A cross-site request forgery CSRF vulnerability has been reported in the GlassFish HTTP administration interface...

CVE-2012-0550

Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container...

CVE-2012-0550

CVE-2012-0550 refers to a CSRF vulnerability in Oracle GlassFish Server 3.1.1 (GlassFish Enterprise Server), specifically affecting the REST interface/Web Container components. The issue is described in sources (e.g., CPAI-2012-386) as a REST interface CSRF vulnerability, with OpenVAS noting Glas...