Oracle WebLogic Server Deserialization RCE (CVE-2018-2893)

High Nessus Plugin ID 111665

Synopsis

The remote Oracle WebLogic server is affected by a remote code execution vulnerability.

Description

The remote Oracle WebLogic server is affected by a remote code execution vulnerability in the Core Components subcomponent due to unsafe deserialization of Java objects. An unauthenticated, remote attacker can exploit this, via a crafted Java object, to execute arbitrary Java code in the context of the WebLogic server.

Solution

Apply the appropriate patch according to the July 2018 Oracle Critical Patch Update advisory.

See Also

http://www.nessus.org/u?50f36723

https://github.com/anbai-inc/CVE-2018-2893

https://github.com/Ryaninf/CVE-2018-2893

Plugin Details

Severity: High

ID: 111665

File Name: weblogic_cve_2018_2893.nasl

Version: 1.4

Type: remote

Family: Web Servers

Published: 2018/08/13

Updated: 2018/09/17

Dependencies: 109552, 56979

Risk Information

Risk Factor: High

CVSS Score Source: CVE-2018-2893

CVSS v2.0

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v3.0

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/a:oracle:weblogic_server

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2018/07/18

Vulnerability Publication Date: 2018/07/18

Reference Information

CVE: CVE-2018-2893

BID: 104763