CVE-2007-5085

Published: Sep 26, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in the management EJB (MEJB) in Apache Geronimo before 2.0.2 allows remote attackers to bypass authentication and obtain "access to Geronimo internals" via unspecified vectors.

Affected (2)

Products: Apache: Geronimo

Apache

1 product

Geronimo

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apache Geronimo	Version 2.0.1
Apache Geronimo	Version 2.1

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (16)

http://geronimo.apache.org/2007/09/07/mejb-security-alert.html

Source: cve@mitre.org

http://osvdb.org/38661

Source: cve@mitre.org

http://secunia.com/advisories/26906

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27464

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=swg21271586

Source: cve@mitre.org

http://www.securityfocus.com/bid/25804

Source: cve@mitre.org

http://www.securitytracker.com/id?1018877

Source: cve@mitre.org

https://issues.apache.org/jira/browse/GERONIMO-3456

Source: cve@mitre.org

http://geronimo.apache.org/2007/09/07/mejb-security-alert.html