Sun GlassFish Enterprise Server

ソフト名：Sun GlassFish Enterprise Server 2.1.1/3.0.1

回避策：アップデートにて対応

脆弱性：セキュリティ制限の回避, 認証メカニズムの回避

ソース：http://www.oracle.com/us/products/middleware/application-server/oracle-glassfish-server/index.html

http://www.oracle.com/technetwork/middleware/glassfish/overview/index.html

http://www.coresecurity.com/content/oracle-glassfish-server-administration-console-authentication-bypass

http://secunia.com/advisories/44499/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1511

CVE：CVE-2011-1511

危険性：Medium Risk