Input validation error in Sun GlassFish Enterprise Server - CVE-2011-4358
Published: July 18, 2012 / Updated: August 11, 2020
Vulnerability identifier: #VU43844
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2011-4358
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect confidentiality and integrity, related to JSF.
Affected software
Sun GlassFish Enterprise Server
How to mitigate CVE-2011-4358
Install update from vendor's website.