CVE-2017-10271

Description

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Traduire en français

Produits concernés

• Oracle Corporation WebLogic Server
• Oracle weblogic server

Scores CVSS

Faiblesses (CWE)

• CWE-306

Références

• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html PatchVendor Advisory
• http://www.securityfocus.com/bid/101304 Broken LinkThird Party AdvisoryVDB Entry
• http://www.securitytracker.com/id/1039608 Broken LinkThird Party AdvisoryVDB Entry
• https://github.com/c0mmand3rOpSec/CVE-2017-10271 Exploit
• https://www.exploit-db.com/exploits/43458/ ExploitThird Party AdvisoryVDB Entry
• https://www.exploit-db.com/exploits/43924/ ExploitThird Party AdvisoryVDB Entry
• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html PatchVendor Advisory
• http://www.securityfocus.com/bid/101304 Broken LinkThird Party AdvisoryVDB Entry
• http://www.securitytracker.com/id/1039608 Broken LinkThird Party AdvisoryVDB Entry
• https://github.com/c0mmand3rOpSec/CVE-2017-10271 Exploit
• https://www.exploit-db.com/exploits/43458/ ExploitThird Party AdvisoryVDB Entry
• https://www.exploit-db.com/exploits/43924/ ExploitThird Party AdvisoryVDB Entry
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-10271 US Government Resource

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories