CVE-2010-4438: Medium severity glassfish vulnerability

Published Jan 19, 2011

Updated

Unspecified vulnerability in Oracle GlassFish 2.1, 2.1.1, and 3.0.1, and Java System Message Queue 4.1 allows local users to affect confidentiality, integrity, and availability, related to Java Message Service (JMS).

Affected Software

4 affected components

Oracle GlassFish Server=2.1

Oracle GlassFish Server=2.1.1

Oracle GlassFish Server=3.0.1

Oracle Java System Message Queue=4.1

Event History

Jan 19, 2011

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4438?

CVE-2010-4438 is classified as a high severity vulnerability that can affect confidentiality, integrity, and availability.

How do I fix CVE-2010-4438?

To fix CVE-2010-4438, upgrade to a supported version of Oracle GlassFish Server or Oracle Java System Message Queue that is not affected by this vulnerability.

Which versions are affected by CVE-2010-4438?

CVE-2010-4438 affects Oracle GlassFish Server versions 2.1, 2.1.1, 3.0.1 and Oracle Java System Message Queue version 4.1.

What type of users can exploit CVE-2010-4438?

CVE-2010-4438 can be exploited by local users who have access to the affected systems.

What impact does CVE-2010-4438 have on systems?

CVE-2010-4438 can potentially compromise the confidentiality, integrity, and availability of the affected systems.