Description (CNA)
In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Eclipse Foundation / Glassfish | affected 6.0.0 through 6.2.5; affected 5.0 through 5.1 |
CWE
CWE-913, CWE-20
References
- https://glassfish.org/docs/latest/security-guide.html#securing-glassfish-server
- https://gitlab.eclipse.org/security/cve-assignement/-/issues/14
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.