CVE-2019-2725 PoC — Oracle Fusion Middleware WebLogic Server组件访问控制错误漏洞

Source

https://github.com/lufeirider/CVE-2019-2725

Associated Vulnerability

Title:Oracle Fusion Middleware WebLogic Server组件访问控制错误漏洞 (CVE-2019-2725)
Description:Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Description

CVE-2019-2725 命令回显

Readme

# CVE-2019-2725

CVE-2019-2725(CNVD-C-2019-48814、WebLogic wls9-async)

# 命令回显

## 10.3.6
![10.0.3效果图](https://raw.githubusercontent.com/lufeirider/CVE-2019-2725/master/10.0.3%E6%95%88%E6%9E%9C%E5%9B%BE.jpg)

## 12.1.3
![12.1.3效果图](https://raw.githubusercontent.com/lufeirider/CVE-2019-2725/master/12.1.3%E6%95%88%E6%9E%9C%E5%9B%BE.jpg)


# ResultBaseExec.java
用于测试defineClass，将把恶意类从base64还原出来，执行代码，主要是比较方便（可用可不用）。

# JDK7u21.java
会生成weblogic-2019-2725_12.1.3命令执行.txt中的xml，请使用jdk6编译。

# CVE-2019-2725.py
检测命令是否会执行。

File Snapshot


 [4.0K]  /data/pocs/7a2b540826082f11fe9e19f7e2fe6cb2e77be0d1
├── [106K]  10.0.3效果图.jpg
├── [102K]  12.1.3效果图.jpg
├── [522K]  CVE-2019-2725.py
├── [ 21K]  JDK7u21.java
├── [ 660]  README.md
├── [4.2K]  ResultBaseExec.java
├── [252K]  weblogic-2019-2725_10.3.6命令执行.txt
├── [126K]  weblogic-2019-2725_10.3.6回显检测.txt
├── [4.8K]  weblogic-2019-2725_12.1.3命令执行.txt
└── [1.9K]  weblogic-2019-2725-12.1.3回显检测.txt

0 directories, 10 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!