Description
In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.
Remediation
References
https://glassfish.org/docs/latest/security-guide.html#securing-glassfish-server
https://gitlab.eclipse.org/security/cve-assignement/-/issues/14
Related Vulnerabilities
CVE-2021-3637 Vulnerability in maven package org.keycloak:keycloak-model-infinispan
CVE-2019-5427 Vulnerability in maven package com.mchange:c3p0
CVE-2021-21179 Vulnerability in maven package org.webjars.npm:electron
CVE-2023-36477 Vulnerability in maven package org.xwiki.contrib:application-ckeditor-ui
CVE-2023-29508 Vulnerability in maven package org.xwiki.platform:xwiki-platform-livedata-macro