The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.

According to its self-reported version number, the version of JFrog Artifactory installed on the remote machine is prior to 6.23.1. It is, therefore, affected by multiple vulnerabilities:

  - CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to     trigger excessive memory allocation during a decode operation, because the nonce array length associated with     'new byte' may depend on untrusted input within the header of encoded data. (CVE-2020-7226)   
  - The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation,     and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64. (CVE-2019-17359)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the version of JFrog Artifactory installed on the remote machine is prior to 7.10.5. It is, therefore, affected by multiple vulnerabilities:

  - CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to     trigger excessive memory allocation during a decode operation, because the nonce array length associated with     'new byte' may depend on untrusted input within the header of encoded data. (CVE-2020-7226)   
  - The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation,     and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64. (CVE-2019-17359)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the April 2020 Critical Patch Update (CPU). It is, therefore, affected by the following vulnerabilities :

  - A polymorphic typing exists in the jackson-databind component of the security framework of Oracle     WebCenter Portal. An unauthenticated, remote attacker can exploit this, via an externally exposed RMI     endpoint, to make the service execute a malicious payload. (CVE-2019-16943)

  - A memory allocation issue exists in the Bouncy Castle Crypto library component of the security framework     of Oracle WebCenter Portal. An unauthenticated, remote attacker can exploit this, via crafted ASN.1 data,     to cause a partial denial of service condition. (CVE-2019-17359)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the CPUApr2020 advisory.

  - A remote code execution vulnerability exists in the Log4j SocketServer class due to unsafe deserialization of     untrusted data. An unauthenticated, remote attacker can exploit this to remotely execute arbitrary code when     combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j     versions up to 1.2 up to 1.2.17. (CVE-2019-17571)

  - An information disclosure vulnerability exists in the Console component. An unauthenticated, remote attacker can     exploit this to gain unauthorized read access to a subset of Oracle WebLogic Server accessible data. (CVE-2020-2766)

  - A vulnerability in the WLS Web Services component exists. An authenticated, remote attacker can exploit this via T3     to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle     WebLogic Server. (CVE-2020-2798)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities:

  - An unspecified vulnerability in the Third Party Tools     (Bouncy Castle Java Library) component of Oracle WebLogic     Server. An unauthenticated attacker with network access     via HTTPS could exploit this vulnerability to compromise     Oracle WebLogic Server. A successful attack of this     vulnerability can result in unauthorized ability to cause     a hang or frequently repeatable crash (complete DOS) of     Oracle WebLogic Server. (CVE-2019-1735)

  - An unspecified vulnerability in the Console component of     Oracle WebLogic Server.  An unauthenticated attacker with     network access via HTTP could exploit this vulnerability     to compromise Oracle WebLogic Server. A successful attack     requires human interaction from a person other than the     attacker. A successful attacks of this vulnerability can     result in unauthorized ability to cause a partial denial     of service (partial DOS) of Oracle WebLogic Server.
    (CVE-2020-2519)   
  - An unspecified vulnerability in the Console component of     Oracle WebLogic Server.  An unauthenticated attacker with     network access via HTTP could exploit this vulnerability     to compromise Oracle WebLogic Server. A successful attack     requires human interaction from a person other than the     attacker. A successful attack of this vulnerability can     result in unauthorized update, insert or delete access     to some of Oracle WebLogic Server accessible data.
    (CVE-2020-2544)   
  - An unspecified vulnerability in the Application     Container - JavaEE component of Oracle WebLogic Server.
    An unauthenticated attacker with network access via T3     could exploit this vulnerability to compromise Oracle     WebLogic Server. A successful attack of this vulnerability     can result in takeover of Oracle WebLogic Server.
    (CVE-2020-2546)   
  - An unspecified vulnerability in the Console component of     Oracle WebLogic Server. A high privileged attacker with     network access via HTTP could exploit this vulnerability     to compromise Oracle WebLogic Server. A successful attack     requires human interaction from a person other than the     attacker and while the vulnerability is in Oracle WebLogic     Server, attacks may significantly impact additional     products. Successful attacks of this vulnerability can     result in unauthorized update, insert or delete access to     some of Oracle WebLogic Server accessible data as well as     unauthorized read access to a subset of Oracle WebLogic     Server accessible data. (CVE-2020-2547)   
  - An unspecified vulnerability in the WLS Core Components     of Oracle WebLogic Server. A high privileged attacker     with network access via HTTP could exploit this     vulnerability to compromise Oracle WebLogic Server.
    A successful attack requires human interaction from a     person other than the attacker and while the vulnerability     is in Oracle WebLogic Server, attacks may significantly     impact additional products. Successful attacks of this     vulnerability can result in unauthorized update, insert or     delete access to some of Oracle WebLogic Server accessible     data as well as unauthorized read access to a subset of     Oracle WebLogic Server accessible data.
    (CVE-2020-2548)   
  - An unspecified vulnerability in the WLS Core Components     of Oracle WebLogic Server. A high privileged attacker with     network access via HTTP could exploit this vulnerability to     compromise Oracle WebLogic Server. A successful attack of this     vulnerability can result in takeover of Oracle WebLogic Server.
    (CVE-2020-2549)   
  - An unspecified vulnerability in the WLS Core Components     of Oracle WebLogic Server. A high privileged attacker with     logon to the infrastructure where Oracle WebLogic Server     executes could exploit this vulnerability to compromise     racle WebLogic Server. A successful attack of this     vulnerability can result in unauthorized access to critical     data or complete access to all Oracle WebLogic Server     accessible data.
    (CVE-2020-2550)   
  - An unspecified vulnerability in the WLS Core Components of     Oracle WebLogic Server. An unauthenticated attacker with     network access via IIOP could exploit this vulnerability to     compromise Oracle WebLogic Server. A successful attack of this     vulnerability can result in takeover of Oracle WebLogic Server.
    (CVE-2020-2551)   
  - An unspecified vulnerability in the WLS Core Components of     Oracle WebLogic Server. A high privileged attacker with     network access via HTTP could exploit this vulnerability     to compromise Oracle WebLogic Server. A successful attack     requires human interaction from a person other than the     attacker and while the vulnerability is in Oracle     WebLogic Server, attacks may significantly impact     additional products. A successful attack of this     vulnerability can result in unauthorized update,     insert or delete access to some of Oracle WebLogic     Server accessible data as well as unauthorized read     access to a subset of Oracle WebLogic Server accessible     data. (CVE-2020-2552)   
  - An unspecified vulnerability in the Web Container     (JavaServer Faces) Components of Oracle WebLogic Server.
    An unauthenticated attacker with network access via     HTTP could exploit this vulnerability to compromise     Oracle WebLogic Server. A successful attack of this     vulnerability can result in unauthorized access to     critical data or complete access to all Oracle WebLogic     Server accessible data. (CVE-2020-6950)

ID	Name	Product	Family	Severity
147717	JFrog Artifactory < 6.23.1 Multiple Vulnerabilities	Nessus	Misc.	high
144301	JFrog Artifactory < 7.10.5 Multiple Vulnerabilities	Nessus	Misc.	high
135850	Oracle WebCenter Portal Multiple Vulnerabilities (Apr 2020 CPU)	Nessus	Misc.	critical
135680	Oracle WebLogic Server Multiple Vulnerabilities (Apr 2020 CPU)	Nessus	Misc.	critical
132961	Oracle WebLogic Server Multiple Vulnerabilities (Jan 2020 CPU)	Nessus	Misc.	critical

Detections

Analytics

CVE-2019-17359

high

Tenable Plugins

high

high

critical

critical

critical