Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8xjw-wvq4-r67r

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an unauthenticated attacker plain text password of administrative user and grant access to the web-based administration interface.

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an unauthenticated attacker plain text password of administrative user and grant access to the web-based administration interface.

EPSS

Процентиль: 76%
0.017
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 9 лет назад

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an unauthenticated attacker plain text password of administrative user and grant access to the web-based administration interface.

CVSS3: 9.8
nvd
около 9 лет назад

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an unauthenticated attacker plain text password of administrative user and grant access to the web-based administration interface.

CVSS3: 9.8
debian
около 9 лет назад

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulne ...

EPSS

Процентиль: 76%
0.017
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-287