# WHATPORT(4848)

## NAME

port 4848 — GlassFish / Payara admin console — The administration console of a GlassFish or Payara Java application server — full deployment control.

Protocol: TCP  
IANA registry

## DESCRIPTION

IANA registers 4848 as appserv-http, App Server Admin HTTP, and that is exactly what it is: the default admin listener of Sun/Oracle GlassFish, its Eclipse successor Eclipse GlassFish, and the Payara fork. The quick-start guide points administrators at http://localhost:4848, and the same port serves the asadmin CLI's remote commands. Whoever reaches it can deploy applications, which on a Java application server means running arbitrary code.

## EXPOSURE

**Do not expose.** Deploying a WAR through this console is remote code execution by design; keep it on localhost or a management network, and never publish it even with authentication enabled.

## CHECK

```sh
curl -sk -o /dev/null -w '%{http_code}\n' --max-time 5 https://TARGET:4848/
```

## SEE ALSO

- docs — [Eclipse GlassFish Quick Start Guide — Administration Console on port 4848](https://glassfish.org/docs/latest/quick-start-guide.html) (glassfish.org)
- source — [eclipse-ee4j/glassfish](https://github.com/eclipse-ee4j/glassfish) (github.com)
- iana — [IANA port registry — 4848 (appserv-http)](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=4848) (iana.org)

---

HTML: <https://whatport.net/4848/> · JSON: <https://whatport.net/4848.json> · full dataset: <https://whatport.net/ports.json>