This script is Copyright (C) 2011-2015 Tenable Network Security, Inc.
The remote service has a code execution vulnerability.
Zend Server Java Bridge, a service that lets PHP applications use
Java code, has an arbitrary code execution vulnerability. The service
accepts requests to execute Java code without authentication.
A remote, unauthenticated attacker could exploit this to execute
arbitrary Java code.
See also :
Apply the hofix provided by the vendor.
If the hotfix is already applied, ensure access to the service is
restricted using the 'zend.javamw.ip' system property.
Risk factor :
Critical / CVSS Base Score : 10.0
CVSS Temporal Score : 8.3
Public Exploit Available : true
Nessus Plugin ID: 53533 ()
Bugtraq ID: 47060
Upgrade to Nessus Professional today!
Start your free Nessus Cloud trial now!
Begin Free Trial
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.