Description
In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.
Remediation
References
https://gitlab.eclipse.org/security/cve-assignement/-/issues/14
https://glassfish.org/docs/latest/security-guide.html#securing-glassfish-server
Related Vulnerabilities
CVE-2020-2281 Vulnerability in maven package org.6wind.jenkins:lockable-resources
CVE-2019-12423 Vulnerability in maven package org.apache.cxf:cxf-rt-rs-security-jose
CVE-2020-25649 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2020-2121 Vulnerability in maven package org.jenkins-ci.plugins:google-kubernetes-engine
CVE-2022-41238 Vulnerability in maven package com.groupon.jenkins-ci.plugins:dotci