CVE record · 1 source
CVE-2026-97870
When Hessian remoting endpoints are served by the embedded HTTP server, configured authentication and transport security requirements are silently…
- Vendor
- Apache Software Foundation
- Product
- Apache TomEE
- Weakness
- CWE-306
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
When Hessian remoting endpoints are served by the embedded HTTP server, configured authentication and transport security requirements are silently…
When Hessian remoting endpoints are served by the embedded HTTP server, configured authentication and transport security requirements are silently ignored. A remote unauthenticated attacker can invoke the exposed EJB methods…