- Description
- Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service (JMS).
- Source
- secalert_us@oracle.com
- NVD status
- Deferred
CVSS 2.0
- Type
- Primary
- Base score
- 5.7
- Impact score
- 8.5
- Exploitability score
- 3.1
- Vector string
- AV:L/AC:L/Au:S/C:P/I:P/A:C
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:glassfish_server:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBDD6781-CF9E-4ED3-861F-99217EE0711C"
},
{
"criteria": "cpe:2.3:a:oracle:glassfish_server:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E80F5AC-A2EF-4D8A-AE8F-5DD0FF9B48C2"
},
{
"criteria": "cpe:2.3:a:oracle:glassfish_server:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A56AAEB5-E5A5-44A4-8B82-0C465122F2C9"
},
{
"criteria": "cpe:2.3:a:oracle:java_system_message_queue:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E097805-13EF-4781-9001-9B246DEA605B"
}
],
"operator": "OR"
}
]
}
]