CVE-2017-1000029

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that makes it possible to include arbitrary files on the server, this vulnerability can be exploited without any prior authentication.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-07-17

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Glassfish Server (Oracle)

References

• https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-011/?fid=8037