WebLogic RMI Registry UnicastRef Object Deserialization of Untrusted Data RCE

Follow 0

Basic Fields

SSV ID:: SSV-96224

Find Time:: 2017-01-24

Submit Time:: 2017-06-25

Level:

Category:: 命令执行

Component:: Oracle WebLogic Server

Author:: Unknown

Submitter:: Knownsec

CVE-ID：: CVE-2017-3248

CNNVD-ID：: Add

CNVD-ID：: Add

ZoomEye Dork：: Add

Source

http://www.zerodayinitiative.com/advisories/ZDI-17-055/

Detail

Contributor Got 0KB

have 0 exchange

PoC

Unavailable PoC

Reference Linking

Solutions

Temp Solutions

Unavailable Temp Solutions

Official Solution

Unavailable Official solution

Defense Solutions

Unavailable Defense Solutions

Unavailable Comments

※Any content provided by this site, only to learn the code and services, not for illegal purposes