passbe/beef-migration-test-3 — Issue #380: Add Glassfish auth-bypass (CVE 2011-1511)
Author: passbe
Created: 2011-12-09 00:43:10+00:00
State: open

Add the Oracle/Sun Glassfish auth bypass exploit discovered by CORE Security.

<sclero>It's amazing to see how many applications are vulnerable to auth-bypass through HTTP Verb tampering: in which security book was it written to only filter GET and POST requests for auth? </sclero>

Google Code Issue: http://code.google.com/p/beef/issues/detail?id=342