CVE-2020-14883 PoC — Oracle WebLogic Server 安全漏洞

Source

https://github.com/Osyanina/westone-CVE-2020-14883-scanner

Associated Vulnerability

Title:Oracle WebLogic Server 安全漏洞 (CVE-2020-14883)
Description:Oracle WebLogic Server是美国甲骨文（Oracle）公司的一款适用于云环境和传统环境的应用服务中间件，它提供了一个现代轻型开发平台，支持应用从开发到生产的整个生命周期管理，并简化了应用的部署和管理。 Oracle WebLogic Server Console 存在安全漏洞。以下产品及版本受到影响：10.3.6.0.0版本, 12.1.3.0.0版本, 12.2.1.3.0版本, 12.2.1.4.0版本, 14.1.1.0.0版本。

Description

A vulnerability scanner that detects CVE-2020-14883 vulnerabilities.

Readme

# westone-CVE-2020-14883-scanner  
A remote attacker can construct a special HTTP request to take over the WebLogic Server Console without authentication.  
# Installation & Usage 
git clone https://github.com/Osyanina/westone-CVE-2020-14883-scanner.git  
cd westone-CVE-2020-14883-scanner  
cmd CVE-2020-14883.exe  
# Impact version 
Oracle WebLogic Server version 10.3.6.0  
Oracle WebLogic Server version 12.1.3.0  
Oracle WebLogic Server version 12.2.1.3  
Oracle WebLogic Server version 12.2.1.4  
Oracle WebLogic Server version 14.1.1.0

File Snapshot


 [4.0K]  /data/pocs/31d19b0d0ea87c6df174424a68fa9780d580f3f2
└── [ 543]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!