cbcvebase.
CVE-2017-1000029
published 2017-07-17

CVE-2017-1000029: Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that makes it possible to include arbitrary…

PriorityP260high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EXPLOIT
EPSS
8.35%
94.3th percentile
Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that makes it possible to include arbitrary files on the server, this vulnerability can be exploited without any prior authentication.

Affected

1 ranges
VendorProductVersion rangeFixed in
oracleglassfish_server——

Detection & IOCsextracted from sources · hover to see the quote

url/resource/file%3a///etc/passwd/↗
  • →Send an unauthenticated HTTP GET request to the path /resource/file%3a///etc/passwd/ on GlassFish Server 3.0.1; a vulnerable server will return HTTP 200 with passwd file contents matching root:[x*]:0:0: ↗
  • →The LFI vector uses URL-encoded colon (%3a) in the file URI scheme within the /resource/ endpoint to bypass path restrictions and read arbitrary server files without authentication. ↗
  • →Use Shodan query cpe:"cpe:2.3:a:oracle:glassfish_server" to identify exposed GlassFish Server instances for proactive scanning. ↗
  • ·The LFI path example targets Linux/Unix systems (/etc/passwd); the exploitation path and detection regex may differ on Windows-based deployments. ↗

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.