CVEvulnerability
CVE-2007-5085
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-09-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-287
Description
Unspecified vulnerability in the management EJB (MEJB) in Apache Geronimo before 2.0.2 allows remote attackers to bypass authentication and obtain "access to Geronimo internals" via unspecified vectors.
Affected configurations
• apache geronimo 2.0.1
• apache geronimo 2.1
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://geronimo.apache.org/2007/09/07/mejb-security-alert.html geronimo.apache.org
- http://osvdb.org/38661 osvdb.org
- http://secunia.com/advisories/26906 Vendor Advisory
- http://secunia.com/advisories/27464 secunia.com
- http://www-1.ibm.com/support/docview.wss?uid=swg21271586 www-1.ibm.com
- http://www.securityfocus.com/bid/25804 www.securityfocus.com
- http://www.securitytracker.com/id?1018877 www.securitytracker.com
- https://issues.apache.org/jira/browse/GERONIMO-3456 issues.apache.org
- http://geronimo.apache.org/2007/09/07/mejb-security-alert.html geronimo.apache.org
- http://osvdb.org/38661 osvdb.org
- http://secunia.com/advisories/26906 Vendor Advisory
- http://secunia.com/advisories/27464 secunia.com
- http://www-1.ibm.com/support/docview.wss?uid=swg21271586 www-1.ibm.com
- http://www.securityfocus.com/bid/25804 www.securityfocus.com
- http://www.securitytracker.com/id?1018877 www.securitytracker.com
- https://issues.apache.org/jira/browse/GERONIMO-3456 issues.apache.org