{"uuid": "793df64e-5bd5-483f-9352-467e973511a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0807", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/glassfish_deployer.rb", "content": "{\"aliases\": [], \"arch\": \"java, x86\", \"author\": [\"juan vazquez \", \"Joshua Abraham \", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module logs in to a GlassFish Server (Open Source or Commercial) using various\\n          methods (such as authentication bypass, default credentials, or user-supplied login),\\n          and deploys a malicious war file in order to get remote code execution. It has been\\n          tested on Glassfish 2.x, 3.0, 4.0 and Sun Java System Application Server 9.x. Newer\\n          GlassFish versions do not allow remote access (Secure Admin) by default, but is required\\n          for exploitation.\", \"disclosure_date\": \"2011-08-04\", \"fullname\": \"exploit/multi/http/glassfish_deployer\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 17:11:13 +0000\", \"name\": \"Sun/Oracle GlassFish Server Authenticated Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/glassfish_deployer.rb\", \"platform\": \"Java,Linux,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/glassfish_deployer\", \"references\": [\"CVE-2011-0807\", \"OSVDB-71948\", \"ATT&CK-T1021\"], \"rport\": 4848, \"session_types\": false, \"targets\": [\"Automatic\", \"Java Universal\", \"Windows Universal\", \"Linux Universal\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:49.091646Z"}