Authentication flaw

The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to execute arbitrary code via a session on TCP port 10001, aka ZDI-CAN-2116...

CVE-2014-2609: Improper Authentication

The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to execute arbitrary code via a session on TCP port 10001, aka ZDI-CAN-2116...

PT-2014-4813

Name of the Vulnerable Software and Affected Versions HP Executive Scorecard versions 9.40 through 9.41 Description The Java Glassfish Admin Console does not require authentication, allowing remote attackers to execute arbitrary code via a session on TCP port 10001. Recommendations For versions...

Oracle Java GlassFish Server Security Bypass Vulnerability (May 2011)

Oracle GlassFish Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Java GlassFish Server Privilege Escalation Vulnerability

The host is running GlassFish Server and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodoracleGlassFishprevesclvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Oracle Java GlassFish Server Privilege Escalation Vulnerability Authors: Antu Sanadi Copyright:...