Curated security research, vulnerabilities, advisories and tools for practitioners.

Oracle WebLogic Node Manager allows arbitrary configuration via UNC path

bishopfox.com | vulnerability | #advisory | #oracle | #weblogic | #node-manager | #remote-file-inclusion | #unc-path

📄 Raw .md⬇️ Download .md 🔗 Original ↗

Summary

Bishop Fox advisory: WebLogic Node Manager 10.3.3 and earlier let unauthenticated attackers redirect its config and password files to an attacker-controlled UNC path, then run commands; fixed in 2011.

Published: 2010-10-12 00:00
Collected: 2026-07-08 08:52

---
id: 4295
title: "Oracle WebLogic Node Manager allows arbitrary configuration via UNC path"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/oracle-weblogic-node-manager-advisory"
published_at: "2010-10-12T00:00:00Z"
tags: ["advisory", "oracle", "weblogic", "node-manager", "remote-file-inclusion", "unc-path"]
phying_url: "https://phying.com/item/4295"
lang: en
---

# Oracle WebLogic Node Manager allows arbitrary configuration via UNC path

## Summary

Bishop Fox advisory: WebLogic Node Manager 10.3.3 and earlier let unauthenticated attackers redirect its config and password files to an attacker-controlled UNC path, then run commands; fixed in 2011.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2010-10-12T00:00:00Z
- **Original:** https://bishopfox.com/blog/oracle-weblogic-node-manager-advisory
- **Phying News:** https://phying.com/item/4295