Oracle GlassFish Server Administrative Console Authentication Bypass
Critical Nessus Plugin ID 53876
SynopsisThe remote web server has an authentication bypass vulnerability.
DescriptionThe version of GlassFish Server running on the remote host has an authentication bypass vulnerability. The server treats specially crafted TRACE requests as if they are authenticated GET requests.
A remote, unauthenticated attacker could exploit this to bypass authentication and gain administrative access to the affected application. In turn, this could be leveraged to run commands under the context of the GlassFish server, which is root by default.
SolutionUpgrade to GlassFish Server 3.1 or later, or disable TRACE (refer to the Core Security advisory for more information).