Oracle GlassFish Server Administrative Console Authentication Bypass

Critical Nessus Plugin ID 53876


The remote web server has an authentication bypass vulnerability.


The version of GlassFish Server running on the remote host has an authentication bypass vulnerability. The server treats specially crafted TRACE requests as if they are authenticated GET requests.

A remote, unauthenticated attacker could exploit this to bypass authentication and gain administrative access to the affected application. In turn, this could be leveraged to run commands under the context of the GlassFish server, which is root by default.


Upgrade to GlassFish Server 3.1 or later, or disable TRACE (refer to the Core Security advisory for more information).

See Also

Plugin Details

Severity: Critical

ID: 53876

File Name: glassfish_trace_auth_bypass.nasl

Version: $Revision: 1.9 $

Type: remote

Family: Web Servers

Published: 2011/05/12

Modified: 2015/09/24

Dependencies: 10107

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:oracle:glassfish_server

Exploit Available: true

Exploit Ease: Exploits are available

Exploited by Nessus: true

Patch Publication Date: 2011/02/28

Vulnerability Publication Date: 2011/05/11

Exploitable With

Core Impact

Reference Information

CVE: CVE-2011-1511

BID: 47818

OSVDB: 73461

EDB-ID: 17276