WebLogic反序列化远程命令执行

原创 sauren  2019-07-29 16:19  阅读 608 views 次 评论 16 条

 

2019年4月,WebLogic AdminServer 的两个组件(wls9_async_response.war 和 wls-wsat.war)可以在未登陆的的情况下,通过传递参数触发命令执行。

存在漏洞版本:

10.3.6.0

12.1.3.0

补丁下载:

10.3.6.0
https://support.oracle.com/epmos/faces/DocumentDisplay?id=2535708.1

12.1.3.0 
https://support.oracle.com/epmos/faces/ui/patch/PatchDetail.jspx?patchId=29204657

漏洞POC:

此处为隐藏的内容!
发表评论并刷新,才能查看

 

Usage:

python CVE-2019-2725.py youurl

 

本文地址:https://www.sk15.net/archives/240.html
版权声明:本文为原创文章,版权归 sauren 所有,欢迎分享本文,转载请保留出处!
高性能云服务器特惠

发表评论


表情

  1. qq_avatar
    明心见性te @回复

    tk

  2. qq_avatar
    54545 @回复

    优秀

  3. 123
    123 @回复

    学习一下

  4. Louishor
    Louishor @回复

    You said it perfectly.. canada pharmacies online prescriptions

  5. ErnestLip
    ErnestLip @回复

    You actually expressed that effectively. lovegra

  6. RichardDearp
    RichardDearp @回复

    You revealed it well! Cialis A 22 Anni

  7. Louishor
    Louishor @回复

    Thank you. Ample knowledge.
    northwestpharmacy

  8. Larrytus
    Larrytus @回复

    Wow tons of awesome facts. tamsulosina

  9. ErnestLip
    ErnestLip @回复

    Awesome stuff. Appreciate it. Proventil Versus Ventolin

  10. MatVory
    MatVory @回复

    Effets Secondaires Cialis Generique Levitra Eye Side Effects Loxitane Buy Cialis Clomid Et Nidation Levitra Cialis Foro Progesterone Store

  11. RichardDearp
    RichardDearp @回复

    This is nicely put! ! viagra pills

  12. RichardDearp
    RichardDearp @回复

    You actually expressed this perfectly! kratom capsules

  13. RichardDearp
    RichardDearp @回复

    Lovely data. Many thanks! interactions for modafinil

  14. Larrytus
    Larrytus @回复

    Whoa lots of very good knowledge. tamsulosin hydrochloride

  15. Larrytus
    Larrytus @回复

    Regards. Excellent stuff. Celebrex En Tramadol

  16. Larrytus
    Larrytus @回复

    You reported this exceptionally well! duloxetine