ID CVE-2011-0807
Summary Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:glassfish_server:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:glassfish_server:2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:glassfish_server:2.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:glassfish_server:2.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:sun:java_system_application_server:9.1:*:*:*:*:*:*:*
    cpe:2.3:a:sun:java_system_application_server:9.1:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 22-09-2011 - 03:28)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
confirm http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html
sreason 8327
Last major update 22-09-2011 - 03:28
Published 20-04-2011 - 03:14
Last modified 22-09-2011 - 03:28
Back to Top