Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the target in an rmi:// Worklist URL, then using the response times to infer the results.
                
            References
                    | Link | Resource | 
|---|---|
| http://www.securityfocus.com/bid/11514 | Patch Vendor Advisory | 
| http://secunia.com/advisories/12970 | Vendor Advisory | 
| http://marc.info/?l=bugtraq&m=109876304705234&w=2 | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/17852 | 
Configurations
                    Configuration 1 (hide)
                                
                                
  | 
                        
Information
                Published : 2004-10-24 21:00
Updated : 2017-07-10 18:31
NVD link : CVE-2004-1631
Mitre link : CVE-2004-1631
JSON object : View
CWE
                Products Affected
                openwfe
- work_flow_engine
 


