Test Kennung:	1.3.6.1.4.1.25623.1.0.801926
Kategorie:	Web Servers
Titel:	Oracle GlassFish / System Application Server Security Bypass Vulnerability (Apr 2011) - Active Check
Zusammenfassung:	GlassFish / System Application Server is prone to a security; bypass vulnerability.
Beschreibung:	Summary: GlassFish / System Application Server is prone to a security bypass vulnerability. Vulnerability Insight: The flaw exists in the Web Administration component which listens by default on TCP port 4848. When handling a malformed GET request to the administrative interface, the application does not properly handle an exception allowing the request to proceed without authentication. Vulnerability Impact: Successful exploitation could allow local attackers to execute arbitrary code under the context of the application. Affected Software/OS: Oracle GlassFish version 2.1, 2.1.1 and 3.0.1 and Oracle Java System Application Server 9.1 Solution: Apply the security updates. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0807 http://securityreason.com/securityalert/8327
Copyright	Copyright (C) 2011 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.