Published: 17/07/2012 Updated: 10/10/2014

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 570

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote malicious users to affect confidentiality and integrity, related to JSF.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle sun glassfish enterprise server 3.0.1
oracle sun glassfish enterprise server 3.1.1

Debian Bug report logs - #650430 Mojarra: CVE-2011-4358 Package: mojarra; Maintainer for mojarra is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Luciano Bello <luciano@debianorg> Date: Tue, 29 Nov 2011 18:27:02 UTC Severity: grave Tags: patch, security Fixed in versions mojar ...

It was discovered that Mojarra, an implementation of JavaServer Faces, evaluates untrusted values as EL expressions if includeViewParameters is set to true For the stable distribution (squeeze), this problem has been fixed in version 203-1+squeeze1 For the testing distribution (wheezy) and the unstable distribution (sid), this problem has been ...

NVD-CWE-noinfo http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 http://www.securitytracker.com/id?1027277 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650430 https://nvd.nist.gov https://www.debian.org/security/./dsa-2359

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-4358

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect