Oval Definition:oval:com.ubuntu.xenial:def:201710400000
Revision Date:2017-10-19Version:1
Title:CVE-2017-10400 on Ubuntu 16.04 LTS (xenial) - medium.
Description:Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration Graphical User Interface). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle GlassFish Server accessible data as well as unauthorized read access to a subset of Oracle GlassFish Server accessible data. CVSS 3.0 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-10400
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND The vulnerability of the 'glassfish' package in xenial is not known (status: 'needs-triage'). It is pending evaluation.
  • BACK