In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.
References
| Link | Resource |
|---|---|
| https://gitlab.eclipse.org/security/cve-assignement/-/issues/14 | Issue Tracking Vendor Advisory |
| https://glassfish.org/docs/latest/security-guide.html#securing-glassfish-server | Product |
| https://gitlab.eclipse.org/security/cve-assignement/-/issues/14 | Issue Tracking Vendor Advisory |
| https://glassfish.org/docs/latest/security-guide.html#securing-glassfish-server | Product |
Configurations
History
21 Nov 2024, 08:42
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.8 |
| References | () https://gitlab.eclipse.org/security/cve-assignement/-/issues/14 - Issue Tracking, Vendor Advisory | |
| References | () https://glassfish.org/docs/latest/security-guide.html#securing-glassfish-server - Product |
13 Nov 2023, 19:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://glassfish.org/docs/latest/security-guide.html#securing-glassfish-server - Product | |
| References | (MISC) https://gitlab.eclipse.org/security/cve-assignement/-/issues/14 - Issue Tracking, Vendor Advisory | |
| CPE | cpe:2.3:a:eclipse:glassfish:*:*:*:*:*:*:*:* | |
| First Time |
Eclipse
Eclipse glassfish |
|
| CWE | CWE-913 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
03 Nov 2023, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-03 07:15
Updated : 2024-11-21 08:42
NVD link : CVE-2023-5763
Mitre link : CVE-2023-5763
CVE.ORG link : CVE-2023-5763
JSON object : View
Products Affected
eclipse
- glassfish