Oracle GlassFish Server Vulnerability in Oracle Fusion Middleware
CVE-2017-3626

3.1LOW

Key Information:

Vendor
Oracle
Status
Glassfish Server
Vendor
CVE Published:
24 April 2017

Summary

The vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access to potentially compromise server data. Exploitation of this vulnerability necessitates human interaction from a user other than the attacker, leading to unauthorized read access to specific data within the Oracle GlassFish Server environment.

Affected Version(s)

GlassFish Server 3.1.2

References

http://www.securityfocus.com/bid/97896
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1038293
vdb-entryx_refsource_SECTRACK
http://www.oracle.com/technetwork/security-advisory/cpuap...
x_refsource_CONFIRM

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.