Test ID:	1.3.6.1.4.1.25623.1.0.802927
Category:	Web Servers
Title:	Oracle GlassFish Server Expression Evaluation Security Bypass Vulnerability (Jul 2012)
Summary:	Oracle GlassFish Server is prone to a security bypass; vulnerability.
Description:	Summary: Oracle GlassFish Server is prone to a security bypass vulnerability. Vulnerability Insight: An unspecified error in the application, allows remote attackers to bypass certain security restrictions. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary script code in the browser of an unsuspecting user in the context of an affected application. Affected Software/OS: Oracle GlassFish Server version 3.0.1 and 3.1.1. Solution: Apply the patch from the referenced advisory. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4358 1027277 http://www.securitytracker.com/id?1027277 MDVSA-2013:150 http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.