Unauthorized Access

2017-03-3100:34:21

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

EPSS

0.007

Percentile

80.2%

JSON

orb-iiop is vulnerable to unauthorized access. The vulnerability exists because setting listener network address value in the admin console is ignored. Therefore, the listener is setup on 0.0.0.0 (any interface), and it allows remote attackers to interact with the corba orb interface to affect availability.