CVE-2020-2555 PoC — Oracle Utilities Framework 代码问题漏洞

Source

https://github.com/Qynklee/POC_CVE-2020-2555

Associated Vulnerability

Title:Oracle Utilities Framework 代码问题漏洞 (CVE-2020-2555)
Description:Oracle Utilities Framework是美国甲骨文（Oracle）公司的一款应用程序框架累计功能工具。该工具可以轻松查找在两次发行之间添加到应用程序的功能。 Oracle Utilities Framework中的Coherence 4.2.0.2.0, 4.2.0.3.0, 4.3.0.1.0-4.3.0.6.0, 4.4.0.0.0 和 4.4.0.2.0版本的Caching,CacheStore,Invocation组件存在安全漏洞。攻击者可利用该漏洞控制Oracle Coherenc

Description

poc for CVE-2020-2555

Readme

# POC_CVE-2020-2555
poc for CVE-2020-2555

3 part:
- Client & Server: to build object and send to Server, trigger gadgetchain. Use it for build owner object.
- Attack: send object via T3 protocol with pwntools

File Snapshot


 [4.0K]  /data/pocs/39405d168d0f7a56f968c0c9167e303e62c4c2cb
├── [4.0K]  Attack
│   ├── [1.8K]  cve_2020_2555.ser
│   ├── [1.1K]  CVE_2020_2883_v1.ser
│   ├── [4.3K]  exploit_cve2020_2555.py
│   └── [5.3K]  test.py
├── [4.0K]  Client
│   ├── [1.7K]  cve_2020_2555.ser
│   ├── [4.0K]  lib
│   │   ├── [ 50K]  cache-api.jar
│   │   ├── [ 22K]  coherence-discovery.jar
│   │   ├── [168K]  coherence-hotcache.jar
│   │   ├── [ 24K]  coherence-http-grizzly.jar
│   │   ├── [ 26K]  coherence-http-jetty.jar
│   │   ├── [ 41K]  coherence-http-netty.jar
│   │   ├── [ 27K]  coherence-http-simple.jar
│   │   ├── [ 13M]  coherence.jar
│   │   ├── [241K]  coherence-jcache.jar
│   │   ├── [4.9K]  coherence-jpa.jar
│   │   ├── [ 653]  coherence-loadbalancer.jar
│   │   ├── [135K]  coherence-management.jar
│   │   ├── [ 18K]  coherence-metrics.jar
│   │   ├── [192K]  coherence-mock.jar
│   │   ├── [1.2M]  coherence-rest.jar
│   │   ├── [ 29K]  coherence-transaction.rar
│   │   ├── [2.6K]  coherence-tx.rar
│   │   ├── [235K]  coherence-web.jar
│   │   ├── [ 33K]  coherence-work.jar
│   │   ├── [2.7M]  je.jar
│   │   ├── [262K]  jline.jar
│   │   ├── [ 15K]  licenses.txt
│   │   ├── [4.0K]  security
│   │   │   ├── [6.7K]  coherence-login.jar
│   │   │   ├── [ 174]  login.config
│   │   │   ├── [1.4K]  permissions.xsd
│   │   │   └── [ 27K]  security.policy
│   │   └── [ 82K]  webInstaller.jar
│   ├── [4.0K]  out
│   │   └── [4.0K]  production
│   │       └── [4.0K]  Qynklee_POC_Client
│   │           ├── [ 236]  ASCISInterf.class
│   │           └── [5.5K]  ASCISPlayer.class
│   ├── [ 712]  Qynklee_POC_Client.iml
│   └── [4.0K]  src
│       ├── [ 161]  ASCISInterf.java
│       └── [ 12K]  ASCISPlayer.java
├── [ 210]  README.md
└── [4.0K]  Server
    ├── [4.0K]  lib
    │   ├── [ 50K]  cache-api.jar
    │   ├── [ 22K]  coherence-discovery.jar
    │   ├── [168K]  coherence-hotcache.jar
    │   ├── [ 24K]  coherence-http-grizzly.jar
    │   ├── [ 26K]  coherence-http-jetty.jar
    │   ├── [ 41K]  coherence-http-netty.jar
    │   ├── [ 27K]  coherence-http-simple.jar
    │   ├── [ 13M]  coherence.jar
    │   ├── [241K]  coherence-jcache.jar
    │   ├── [4.9K]  coherence-jpa.jar
    │   ├── [ 653]  coherence-loadbalancer.jar
    │   ├── [135K]  coherence-management.jar
    │   ├── [ 18K]  coherence-metrics.jar
    │   ├── [192K]  coherence-mock.jar
    │   ├── [1.2M]  coherence-rest.jar
    │   ├── [ 29K]  coherence-transaction.rar
    │   ├── [2.6K]  coherence-tx.rar
    │   ├── [235K]  coherence-web.jar
    │   ├── [ 33K]  coherence-work.jar
    │   ├── [2.7M]  je.jar
    │   ├── [262K]  jline.jar
    │   ├── [ 15K]  licenses.txt
    │   ├── [4.0K]  security
    │   │   ├── [6.7K]  coherence-login.jar
    │   │   ├── [ 174]  login.config
    │   │   ├── [1.4K]  permissions.xsd
    │   │   └── [ 27K]  security.policy
    │   └── [ 82K]  webInstaller.jar
    ├── [ 712]  Lib_coherence.iml
    ├── [4.0K]  out
    │   └── [4.0K]  production
    │       └── [4.0K]  Lib_coherence
    │           ├── [ 236]  ASCISInterf.class
    │           ├── [ 709]  ASCISInterfImpl.class
    │           └── [1009]  POC.class
    ├── [1.7K]  payload_obj.ser
    └── [4.0K]  src
        ├── [ 486]  ASCISInterfImpl.java
        ├── [ 159]  ASCISInterf.java
        └── [2.9K]  POC.java

15 directories, 73 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!