Description
Unspecified vulnerability in the management EJB (MEJB) in Apache Geronimo before 2.0.2 allows remote attackers to bypass authentication and obtain "access to Geronimo internals" via unspecified vectors.
Metrics
CVSS 2.0 5.0/10
AV:N/AC:L/Au:N/C:P/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://geronimo.apache.org/2007/09/07/mejb-security-alert.html
- http://osvdb.org/38661
- http://secunia.com/advisories/26906Vendor Advisory
- http://secunia.com/advisories/27464
- http://www-1.ibm.com/support/docview.wss?uid=swg21271586
- http://www.securityfocus.com/bid/25804
- http://www.securitytracker.com/id?1018877
- https://issues.apache.org/jira/browse/GERONIMO-3456
- http://geronimo.apache.org/2007/09/07/mejb-security-alert.html
- http://osvdb.org/38661
- http://secunia.com/advisories/26906Vendor Advisory
- http://secunia.com/advisories/27464
- http://www-1.ibm.com/support/docview.wss?uid=swg21271586
- http://www.securityfocus.com/bid/25804
- http://www.securitytracker.com/id?1018877
- https://issues.apache.org/jira/browse/GERONIMO-3456
Timeline
- Published
- Sep 26, 2007
- Last modified
- Jun 16, 2026
- NVD status
- Modified