Test ID:	1.3.6.1.4.1.25623.1.0.801926
Category:	Web Servers
Title:	Oracle GlassFish / System Application Server Security Bypass Vulnerability (Apr 2011) - Active Check
Summary:	GlassFish / System Application Server is prone to a security; bypass vulnerability.
Description:	Summary: GlassFish / System Application Server is prone to a security bypass vulnerability. Vulnerability Insight: The flaw exists in the Web Administration component which listens by default on TCP port 4848. When handling a malformed GET request to the administrative interface, the application does not properly handle an exception allowing the request to proceed without authentication. Vulnerability Impact: Successful exploitation could allow local attackers to execute arbitrary code under the context of the application. Affected Software/OS: Oracle GlassFish version 2.1, 2.1.1 and 3.0.1 and Oracle Java System Application Server 9.1 Solution: Apply the security updates. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0807 http://securityreason.com/securityalert/8327
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.