GlassFish LFI

In Oracle GlassFish Server Open Source Edition 4.1 the Administration Console is listening by default on port 4848/TCP, and is prone to a directory traversal vulnerability. This vulnerability can be exploited by issuing a specially crafted HTTP GET request.

Impact

This vulnerability can be exploited by remote attackers to access sensitive data on the server being authenticated.

Mitigation / Precaution

We recommend you to update GlassFish Server to the latest version.

Written by

Anandhu K A

Lead Engineer

With a profound understanding of product development, Anandhu plays a pivotal role in crafting cutting-edge solutions that cater to the evolving security needs of digital applications. His expertise, deeply rooted in both engineering and security, makes him an essential component of Beagle Security's mission