Description

Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that makes it possible to include arbitrary files on the server, this vulnerability can be exploited without any prior authentication.

Remediation

References

CVE-2017-1000029

Related Vulnerabilities

MySQL CVE-2013-3839 Vulnerability (CVE-2013-3839)

Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2003-1418)

WordPress Plugin SE HTML5 Album Audio Player Directory Traversal (1.1.0)

WeBid Incorrect Comparison Vulnerability (CVE-2020-23359)

WordPress Plugin Visitor Traffic Real Time Statistics Cross-Site Request Forgery (1.12)

Severity

High

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2017-1000029