{"vulnerability": "CVE-2011-0807", "sightings": [{"uuid": "109a4090-2688-49e9-81a9-14f9278ddd28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0807", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "c55de14f-8761-4a7d-9020-4215118e7b9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0807", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:53.000000Z"}, {"uuid": "52976281-a49e-48dd-8a49-3c3f91edfdb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0807", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/glassfish_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "32b38c94-fafa-461d-9d5b-b9b2f9127329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0807", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/glassfish_deployer.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "21156fab-feb0-48e5-a064-7589202055e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-0807", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/17615", "content": "", "creation_timestamp": "2011-08-05T00:00:00.000000Z"}, {"uuid": "e92f3963-97df-4070-9e91-7489f105e952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0807", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/glassfish_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Joshua Abraham \", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to login to GlassFish instance using username and password\\n        combinations indicated by the USER_FILE, PASS_FILE, and USERPASS_FILE options.\\n        It will also try to do an authentication bypass against older versions of GlassFish.\\n        Note: by default, GlassFish 4.0 requires HTTPS, which means you must set the SSL option\\n        to true, and SSLVersion to TLS1. It also needs Secure Admin to access the DAS remotely.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/glassfish_login\", \"is_install_path\": true, \"mod_time\": \"2025-06-20 13:20:44 +0000\", \"name\": \"GlassFish Brute Force Utility\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/http/glassfish_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/glassfish_login\", \"references\": [\"CVE-2011-0807\", \"OSVDB-71948\"], \"rport\": 4848, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:32.646063Z"}, {"uuid": "793df64e-5bd5-483f-9352-467e973511a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0807", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/glassfish_deployer.rb", "content": "{\"aliases\": [], \"arch\": \"java, x86\", \"author\": [\"juan vazquez \", \"Joshua Abraham \", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module logs in to a GlassFish Server (Open Source or Commercial) using various\\n          methods (such as authentication bypass, default credentials, or user-supplied login),\\n          and deploys a malicious war file in order to get remote code execution. It has been\\n          tested on Glassfish 2.x, 3.0, 4.0 and Sun Java System Application Server 9.x. Newer\\n          GlassFish versions do not allow remote access (Secure Admin) by default, but is required\\n          for exploitation.\", \"disclosure_date\": \"2011-08-04\", \"fullname\": \"exploit/multi/http/glassfish_deployer\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 17:11:13 +0000\", \"name\": \"Sun/Oracle GlassFish Server Authenticated Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/glassfish_deployer.rb\", \"platform\": \"Java,Linux,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/glassfish_deployer\", \"references\": [\"CVE-2011-0807\", \"OSVDB-71948\", \"ATT&CK-T1021\"], \"rport\": 4848, \"session_types\": false, \"targets\": [\"Automatic\", \"Java Universal\", \"Windows Universal\", \"Linux Universal\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:49.091646Z"}]}