Skip to content
Oracle WebLogic Node Manager allows arbitrary configuration via UNC path
bishopfox.com | vulnerability | #advisory | #oracle | #weblogic | #node-manager | #remote-file-inclusion | #unc-path
Summary
Bishop Fox advisory: WebLogic Node Manager 10.3.3 and earlier let unauthenticated attackers redirect its config and password files to an attacker-controlled UNC path, then run commands; fixed in 2011.
- Published
- Collected