Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-1000030

Опубликовано: 17 июл. 2017
Источник: nvd
CVSS3: 9.8
CVSS2: 5
EPSS Низкий

Описание

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an unauthenticated attacker plain text password of administrative user and grant access to the web-based administration interface.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:open_source:*:*:*

EPSS

Процентиль: 88%
0.04204
Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 8 лет назад

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an unauthenticated attacker plain text password of administrative user and grant access to the web-based administration interface.

CVSS3: 9.8
debian
больше 8 лет назад

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulne ...

CVSS3: 9.8
github
больше 3 лет назад

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an unauthenticated attacker plain text password of administrative user and grant access to the web-based administration interface.

EPSS

Процентиль: 88%
0.04204
Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-287