PT-2010-3981 · Oracle · Glassfish Enterprise Server+1

Published 2010-07-13 · Updated 2012-10-23 · CVE-2010-2397

Positive Technologies (AI Summary)

CVSS v2.0

2.4

Low

Base vector

AV:L/AC:H/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Sun Java System Application Server versions 8.0 through 8.2 GlassFish Enterprise Server version 2.1.1

Description The issue affects confidentiality and integrity, and is related to the GUI. It allows local users to exploit the vulnerability.

Recommendations For Oracle Sun Java System Application Server versions 8.0 through 8.2, update to a version that addresses this issue. For GlassFish Enterprise Server version 2.1.1, update to a version that addresses this issue.

Fix

Related Identifiers

CVE-2010-2397

Affected Products

Glassfish Enterprise Server

Oracle Sun Java System Application Server

References · 6

• https://osv.dev/vulnerability/UBUNTU-CVE-2010-2397 · Vendor Advisory
• https://ubuntu.com/security/CVE-2010-2397 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2010-2397 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-2397 · Security Note
• http://oracle.com/technetwork/topics/security/cpuoct2010-175626.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2397 · Note