Signature Detail

HTTP: Oracle GlassFish Server Administration Console Remote Authentication Bypass

This signature detects attempts to exploit a known vulnerability against Oracle GlassFish Server 3.0.1. Attackers can bypass the authentication of the administration console.

Extended Description

The Oracle GlassFish Server Administration Console is prone to a remote authentication-bypass vulnerability. Attackers can exploit this issue to bypass authentication and perform unauthorized actions like obtaining sensitive information and creating an administrator account. Attackers can use the newly created administrator account to execute arbitrary code in the context of server which runs as root by default. The following products are affected: Oracle GlassFish Server 3.0.1 Sun GlassFish Enterprise Server 2.1.1

Affected Products

• Oracle Glassfish Server 3.0.1
• Sun Glassfish Enterprise Server 2.1.1

References

• BugTraq: 47818
• CVE: CVE-2011-1511
• URL: http://www.oracle.com/us/products/middleware/application-server/oracle-glassfish-server/index.html
• URL: http://www.coresecurity.com/content/glassfish_admin_authentication_bypass