This Metasploit module exploits an unauthenticated directory traversal vulnerability which exits in administration console of Oracle GlassFish Server version 4.1, which is listening by default on port 4848/TCP.
d0f15aaf00865662c0076f96a7127cf4276c10af2a3686dc232cfb0d42cff9d8