CVE record · 1 source
CVE-2026-87756
The internal system EJBs used for remote deployment and configuration did not enforce their administrative role check when the server ran with the…
- Vendor
- Apache Software Foundation
- Product
- Apache TomEE
- Weakness
- CWE-306
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The internal system EJBs used for remote deployment and configuration did not enforce their administrative role check when the server ran with the…
The internal system EJBs used for remote deployment and configuration did not enforce their administrative role check when the server ran with the default profile. A remote unauthenticated attacker able to reach the remote EJB…