PT-2016-5613 · Oracle · Oracle Glassfish Server

Published 2016-07-21 · Updated 2017-09-01 · CVE-2016-3608

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server version 3.0.1

Description The issue affects confidentiality and can be exploited remotely. It is related to the Administration component in Oracle Fusion Middleware. No information is available about the estimated number of potentially affected devices or real-world incidents.

Recommendations For Oracle GlassFish Server version 3.0.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2016-3608

Affected Products

Oracle Glassfish Server

References · 6

• https://osv.dev/vulnerability/CVE-2016-3608 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3608 · Security Note
• http://securityfocus.com/bid/92031 · Note
• http://securityfocus.com/bid/91787 · Note
• http://securitytracker.com/id/1036371 · Note