CVE-2019-2725 PoC — Oracle Fusion Middleware WebLogic Server组件访问控制错误漏洞

Description

CVE-2019-2725 bypass pocscan and exp 

介绍

# CVE-2019-2725 bypass

## tips
coded in python3,payload[here](https://github.com/jiansiting/CVE-2019-2725 "here")</br>
that payload only work in jdk6</br>
![](https://github.com/kerlingcode/CVE-2019-2725/blob/master/bug.png)
## exp
usage: usage:exp.py 127.0.0.1:8080 whoami</br>
![](https://github.com/kerlingcode/CVE-2019-2725/blob/master/exp.png)</br>
![](https://github.com/kerlingcode/CVE-2019-2725/blob/master/exp2.png)</br>
## poc
after edit the ip.txt,programe will check the ip in ip.txt,testing if the vulnerability exist or not :
</br>
![](https://github.com/kerlingcode/CVE-2019-2725/blob/master/poc.png)

文件快照

备注