---
id: 4295
title: "Oracle WebLogic Node Manager allows arbitrary configuration via UNC path"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/oracle-weblogic-node-manager-advisory"
published_at: "2010-10-12T00:00:00Z"
tags: ["advisory", "oracle", "weblogic", "node-manager", "remote-file-inclusion", "unc-path"]
phying_url: "https://phying.com/item/4295"
lang: en
---

# Oracle WebLogic Node Manager allows arbitrary configuration via UNC path

## Summary

Bishop Fox advisory: WebLogic Node Manager 10.3.3 and earlier let unauthenticated attackers redirect its config and password files to an attacker-controlled UNC path, then run commands; fixed in 2011.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2010-10-12T00:00:00Z
- **Original:** https://bishopfox.com/blog/oracle-weblogic-node-manager-advisory
- **Phying News:** https://phying.com/item/4295