Unspecified Vulnerability in Oracle GlassFish Server and Java System Application Server

CVE-2011-0807

What is CVE-2011-0807?

An unspecified vulnerability has been identified in Oracle's GlassFish Enterprise Server and Java System Application Server, which could allow remote attackers to disrupt the confidentiality, integrity, and availability of the affected systems. This weakness is associated with unidentified vectors within the administration interface, potentially enabling unauthorized access or manipulation of server operations.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2011-0807
Created by Rapid7

References