Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
GlassFish Use of Hard-coded Credentials Vulnerability - CVE-2018-14324 - Vulnerability Database
GlassFish

GlassFish Use of Hard-coded Credentials Vulnerability - CVE-2018-14324

Critical
Reference: CVE-2018-14324
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-14324
Title: GlassFish Use of Hard-coded Credentials Vulnerability
Overview:

The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password of admin for the admin account. This allows remote attackers to obtain potentially sensitive information perform database operations or manipulate the demo via a JMX RMI session aka a quotjmx_rmi remote monitoring and control problem.quot NOTE: this is not an Oracle supported product.