CVE-2017-10271

Oracle Fusion Middleware dasturining Oracle WebLogic Server komponentidagi zaiflik (kichik komponent: WLS Security). Ta'sir qilingan qo'llab-quvvatlanadigan versiyalar 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 va 12.2.1.2.0. Osonlik bilan foydalaniladigan zaiflik T3 orqali tarmoqqa kirish huquqiga ega bo'lgan autentifikatsiya qilinmagan tajovuzkorga Oracle WebLogic Serverni buzishga imkon beradi. Ushbu zaiflikning muvaffaqiyatli hujumlari Oracle WebLogic Serverni egallab olishga olib kelishi mumkin. CVSS 3.0 Asosiy ball 7.5 (mavjudlikka ta'sir qiladi). CVSS vektori: (CVSS: 3.0/AV: N

CVSS Vector

Manbalar

• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
• http://www.securityfocus.com/bid/101304
• http://www.securitytracker.com/id/1039608
• https://github.com/c0mmand3rOpSec/CVE-2017-10271
• https://www.exploit-db.com/exploits/43458/