cnvd - cnvd-2020-23019

cnvd-2020-23019

Vulnerability from cnvd

Title: Oracle Weblogic SOAPInvokeState远程代码执行漏洞

Description:

WebLogic是美国Oracle公司出品的一个应用服务器，是一个基于JAVAEE架构的中间件，WebLogic是用于开发、集成、部署和管理大型分布式Web应用、网络应用和数据库应用的Java应用服务器。

Oracle Weblogic SOAPInvokeState存在远程代码执行漏洞，攻击者可利用该漏洞通过t3协议或iiop协议发送精心构造的Payload达到远程代码执行效果。

Severity: 高

Patch Name: Oracle Weblogic SOAPInvokeState远程代码执行漏洞的补丁

Patch Description:

Oracle Weblogic SOAPInvokeState存在远程代码执行漏洞，攻击者可利用该漏洞通过t3协议或iiop协议发送精心构造的Payload达到远程代码执行效果。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布相关漏洞补丁链接，请关注厂商主页随时更新： https://www.oracle.com/middleware/weblogic/index.html

Reference: https://www.oracle.com/security-alerts/cpuapr2020.html https://www.seebug.org/vuldb/ssvid-98211

Impacted products

Name
['Oracle WebLogic Server 10.3.6.0.0', 'Oracle WebLogic Server 12.2.1.3.0', 'Oracle WebLogic Server 10.3.6.0.0', 'Oracle Oracle WebLogic Server 12.2.1.4.0']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-2963"
    }
  },
  "description": "WebLogic\u662f\u7f8e\u56fdOracle\u516c\u53f8\u51fa\u54c1\u7684\u4e00\u4e2a\u5e94\u7528\u670d\u52a1\u5668\uff0c\u662f\u4e00\u4e2a\u57fa\u4e8eJAVAEE\u67b6\u6784\u7684\n\u4e2d\u95f4\u4ef6\uff0cWebLogic\u662f\u7528\u4e8e\u5f00\u53d1\u3001\u96c6\u6210\u3001\u90e8\u7f72\u548c\u7ba1\u7406\u5927\u578b\u5206\u5e03\u5f0fWeb\u5e94\u7528\u3001\u7f51\u7edc\u5e94\u7528\u548c\u6570\n\u636e\u5e93\u5e94\u7528\u7684Java\u5e94\u7528\u670d\u52a1\u5668\u3002\n\nOracle Weblogic SOAPInvokeState\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7t3\u534f\u8bae\u6216iiop\u534f\u8bae\u53d1\u9001\u7cbe\u5fc3\u6784\u9020\u7684Payload\u8fbe\u5230\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6548\u679c\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u76f8\u5173\u6f0f\u6d1e\u8865\u4e01\u94fe\u63a5\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u968f\u65f6\u66f4\u65b0\uff1a\r\nhttps://www.oracle.com/middleware/weblogic/index.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-23019",
  "openTime": "2020-04-16",
  "patchDescription": "WebLogic\u662f\u7f8e\u56fdOracle\u516c\u53f8\u51fa\u54c1\u7684\u4e00\u4e2a\u5e94\u7528\u670d\u52a1\u5668\uff0c\u662f\u4e00\u4e2a\u57fa\u4e8eJAVAEE\u67b6\u6784\u7684\r\n\u4e2d\u95f4\u4ef6\uff0cWebLogic\u662f\u7528\u4e8e\u5f00\u53d1\u3001\u96c6\u6210\u3001\u90e8\u7f72\u548c\u7ba1\u7406\u5927\u578b\u5206\u5e03\u5f0fWeb\u5e94\u7528\u3001\u7f51\u7edc\u5e94\u7528\u548c\u6570\r\n\u636e\u5e93\u5e94\u7528\u7684Java\u5e94\u7528\u670d\u52a1\u5668\u3002\r\n\r\nOracle Weblogic SOAPInvokeState\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7t3\u534f\u8bae\u6216iiop\u534f\u8bae\u53d1\u9001\u7cbe\u5fc3\u6784\u9020\u7684Payload\u8fbe\u5230\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6548\u679c\u3002 \u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Oracle Weblogic SOAPInvokeState\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Oracle WebLogic Server 10.3.6.0.0",
      "Oracle WebLogic Server 12.2.1.3.0",
      "Oracle WebLogic Server 10.3.6.0.0",
      "Oracle Oracle WebLogic Server 12.2.1.4.0"
    ]
  },
  "referenceLink": "https://www.oracle.com/security-alerts/cpuapr2020.html \r\nhttps://www.seebug.org/vuldb/ssvid-98211",
  "serverity": "\u9ad8",
  "submitTime": "2020-04-15",
  "title": "Oracle Weblogic SOAPInvokeState\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}

CVE-2020-2963 (GCVE-0-2020-2963)

Vulnerability from cvelistv5

Published

2020-04-15 13:29

Modified

2024-09-27 18:45

Severity ?

7.2 (High) - CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

Easily exploitable vulnerability allows high privileged attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server.

Summary

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

References

▼	URL	Tags
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Oracle Corporation	WebLogic Server	Version: 10.3.6.0.0 Version: 12.1.3.0.0 Version: 12.2.1.3.0 Version: 12.2.1.4.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T07:24:00.455Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2020-2963",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-27T17:55:12.115774Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-27T18:45:18.334Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "WebLogic Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "10.3.6.0.0"
            },
            {
              "status": "affected",
              "version": "12.1.3.0.0"
            },
            {
              "status": "affected",
              "version": "12.2.1.3.0"
            },
            {
              "status": "affected",
              "version": "12.2.1.4.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Easily exploitable vulnerability allows high privileged attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-05-26T14:47:17",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert_us@oracle.com",
          "ID": "CVE-2020-2963",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "WebLogic Server",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "10.3.6.0.0"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "12.1.3.0.0"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "12.2.1.3.0"
                          },
                          {
                            "version_affected": "=",
                            "version_value": "12.2.1.4.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Oracle Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)."
            }
          ]
        },
        "impact": {
          "cvss": {
            "baseScore": "7.2",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Easily exploitable vulnerability allows high privileged attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2020-2963",
    "datePublished": "2020-04-15T13:29:54",
    "dateReserved": "2019-12-10T00:00:00",
    "dateUpdated": "2024-09-27T18:45:18.334Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted