Description
Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the target in an rmi:// Worklist URL, then using the response times to infer the results.
References
- 11514 vdb-entry
- openwfe-rmi-obtain-information(17852) vdb-entry
- 12970 third-party-advisory
- 20041024 Two Vulnerabilities in OpenWFE Web Client mailing-list