CVE-2011-0807

Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://securityreason.com/securityalert/8327
http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:glassfish_server:2.1:::::::*
	cpe:2.3:a:oracle:glassfish_server:2.1.1:::::::*
	cpe:2.3:a:oracle:glassfish_server:3.0.1:::::::*
	cpe:2.3:a:sun:java_system_application_server:9.1:::::::*

History

No history.

Information

Published : 2011-04-20 03:14

Updated : 2024-02-28 11:41

NVD link : CVE-2011-0807

Mitre link : CVE-2011-0807

CVE.ORG link : CVE-2011-0807

JSON object : View

Products Affected

oracle

glassfish_server

sun

java_system_application_server

CWE

NVD-CWE-noinfo

{"id": "CVE-2011-0807", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-04-20T03:14:06.583", "references": [{"url": "http://securityreason.com/securityalert/8327", "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html", "tags": ["Patch", "Vendor Advisory"], "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration."}, {"lang": "es", "value": "Vulnerabilidad no especificada en Oracle Sun GlassFish Enterprise Server v2.1, v2.1.1 y v3.0.1, y Sun Java System Application Server v9.1, permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a trav\u00e9s de vectores desconocidos relacionados con la Administraci\u00f3n."}], "lastModified": "2011-09-22T03:28:57.680", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:glassfish_server:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBDD6781-CF9E-4ED3-861F-99217EE0711C"}, {"criteria": "cpe:2.3:a:oracle:glassfish_server:2.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E80F5AC-A2EF-4D8A-AE8F-5DD0FF9B48C2"}, {"criteria": "cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A56AAEB5-E5A5-44A4-8B82-0C465122F2C9"}, {"criteria": "cpe:2.3:a:sun:java_system_application_server:9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FEAD2DB5-0117-4D84-A79A-26C629EF2453"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}