CVE-2017-1000029
CVE-2017-1000029
Vexday Risk Score
18Low
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 7.6%KEV nãoPoC —Nuclei simMetasploit —Patch —
Lifecycle
13 Jul 2017Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that makes it possible to include arbitrary files on the server, this vulnerability can be exploited without any prior authentication.
Affected products
n/a · n/a