Lucene search
Veracode Vulnerability DatabaseVERACODE:3789HistoryMar 27, 2017 - 9:49 a.m.
Sensitive Information Leak Via Authentication Bypass
2017-03-2709:49:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
console-common is prone to sensitive information leak via an authentication bypass. The vulnerability exists because the administration console is listening on port 4848/TCP by default, allowing the remote attackers to access sensitive data on the server by making TRACE requests against the administration console.
| CPE | Name | Operator | Version |
|---|---|---|---|
| admin console common | eq | 10.0-b28 | |
| admin console common | le | 3.0.1 | |
| admin console common | le | 3.1-b41 |
Related
securityvulns
securityvulns
CORE-2010-1118: Oracle GlassFish Server Administration Console Authentication Bypass
2011-05-12 00:00:00
Oracle GlassFish Server authentication bypass
2012-01-09 00:00:00
seebug
seebug
Oracle GlassFish Server Administration Console Authentication Bypass
2011-05-13 00:00:00
Oracle GlassFish Server็ฎก็ๆงๅถๅฐ่ฟ็จ้ช่ฏ็ป่ฟๆผๆด
2011-05-13 00:00:00
exploitpack
exploitpack
Oracle GlassFish Server - Administration Console Authentication Bypass
2011-05-12 00:00:00
packetstorm
packetstorm
Oracle GlassFish Server Administration Bypass
2012-01-05 00:00:00
Core Security Technologies Advisory 2010.1118
2011-05-12 00:00:00
nessus
nessus
Oracle GlassFish Server Administrative Console Authentication Bypass
2011-05-12 00:00:00
prion
prion
Buffer overflow
2011-07-20 22:55:00
cve
cve
CVE-2011-1511
2011-07-20 22:55:00
openvas
openvas
Oracle GlassFish Server Administration Console Authentication Bypass Vulnerability
2012-01-06 00:00:00
Oracle Java GlassFish Server Security Bypass Vulnerability
2011-05-26 00:00:00
checkpoint_advisories
checkpoint_advisories
exploitdb
exploitdb
Oracle GlassFish Server - Administration Console Authentication Bypass
2011-05-12 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2011
2011-12-15 00:00:00
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
Related for VERACODE:3789