Candidate: CVE-2017-3239
PublicDate: 2017-01-27 22:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3239
 http://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/3432537.xml
 http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html#AppendixFMW
Description:
 Vulnerability in the Oracle GlassFish Server component of Oracle Fusion
 Middleware (subcomponent: Administration). Supported versions that are
 affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows low
 privileged attacker with logon to the infrastructure where Oracle GlassFish
 Server executes to compromise Oracle GlassFish Server. Successful attacks
 of this vulnerability can result in unauthorized read access to a subset of
 Oracle GlassFish Server accessible data. CVSS v3.0 Base Score 3.3
 (Confidentiality impacts).
Ubuntu-Description:
Notes:
 sbeattie> glassfish 3.x only
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N [3.3 LOW]

Patches_glassfish:
upstream_glassfish: needs-triage
precise_glassfish: not-affected (3.x only)
trusty_glassfish: not-affected (3.x only)
trusty/esm_glassfish: DNE (trusty was not-affected [3.x only])
vivid/stable-phone-overlay_glassfish: DNE
vivid/ubuntu-core_glassfish: DNE
xenial_glassfish: not-affected (3.x only)
yakkety_glassfish: not-affected (3.x only)
devel_glassfish: not-affected (3.x only)