ET EXPLOIT Oracle Weblogic Server Deserialization Remote Command Execution

SID: 2025788Rev: 10 viewsHistory

Sourceet/open

CreatedJuly 5, 2018

UpdatedJuly 26, 2019

Classificationattempted-user

alert tcp $EXTERNAL_NET any -> $HOME_NET 1024: (msg:"ET EXPLOIT Oracle Weblogic Server Deserialization Remote Command Execution"; flow:established,to_server; content:"java.rmi.registry.Registry"; fast_pattern; content:"java.lang.reflect.Proxy"; content:"java.rmi.server.RemoteObjectInvocationHandler"; content:"UnicastRef"; reference:url,exploit-db.com/exploits/44553/; reference:cve,2018-2628; classtype:attempted-user; sid:2025788; rev:1; metadata:attack_target Client_Endpoint, created_at 2018_07_05, cve CVE_2018_2628, deployment Perimeter, performance_impact Low, confidence Medium, signature_severity Major, updated_at 2019_07_26;)

References

url	exploit-db.com/exploits/44553/
cve	2018-2628

Metadata

attack targetClient_Endpoint

created at2018_07_05

cveCVE-2018-2628

deploymentPerimeter

performance impactLow

confidenceMedium

signature severityMajor

updated at2019_07_26

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!