Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclosure vulnerability, that makes it possible to provide an unauthenticated attacker plain text password of administrative user and grant access to the web-based administration interface.
Java
Exploit
CVE-2017-1000030
NVD
Refer to CVE-2017-1000030 NVD advisory