亚博买球

信息安全

信息安全 亚博买球 > 信息安全 > 信息安全 > 正文

【漏洞预警 - 亚博买球】WebLogic 反序列化漏洞(CVE-2018-2893)

发布时间:2019-07-18 浏览次数:次

jinri,oracleguanfangfabule7yuefendeguanjianbudinggengxincpu(critical patch update),qizhongbaohanguoneianquanyanjiurenyuanfaxiandeoracledegaoweiyuanchengdaimazhixingloudong(cve-2018-2893),tongguogailoudonggongjizhekeyizaiweishouquandeqingkuangxiayuanchengzhixingrenyidaima。

漏洞概述

亚博买球weblogicshimeiguooraclegongsichupindeyigeapplication server,queqiedeshuoshiyigejiyujavaeejiagoudezhongjianjian,weblogicshiyongyukaifa、jicheng、bushuheguanlidaxingfenbushiwebyingyong、wangluoyingyongheshujukuyingyongdejavayingyongfuwuqi。jiangjavadedongtaigongnenghejava enterprisebiaozhundeanquanxingyinrudaxingwangluoyingyongdekaifa、jicheng、bushuheguanlizhizhong。

亚博买球gailoudongtongguojrmpxieyiliyongrmijizhidequexiandadaozhixingrenyifanxuliehuadaimademude。gongjizhekeyizaiweishouquandeqingkuangxiajiangpayloadfengzhuangzait3xieyizhong,tongguoduit3xieyizhongdepayloadjinxingfanxuliehua,congershixianduicunzailoudongdeweblogiczujianjinxingyuanchenggongji,zhixingrenyidaimabingkehuoqumubiaoxitongdesuoyouquanxian。

漏洞危害

亚博买球tongguogailoudonggongjizhekeyizaiweishouquandeqingkuangxiayuanchengzhixingrenyidaima。

受影响范围

weblogic 10.3.6.0

weblogic 12.1.3.0

亚博买球weblogic 12.2.1.2

亚博买球weblogic 12.2.1.3

yishangjunweiguanfangzhichidebanben。

修复建议

1、guanzhuoracleguanfangcpugengxinbuding,jishijinxinggengxin。

2、kongzhit3xieyidefangwen:ciloudongchanshengyuweblogicdet3fuwu,yinciketongguokongzhit3xieyidefangwenlailinshizuduanzhenduigailoudongdegongji。dangkaifangweblogickongzhitaiduankou(morenwei7001duankou)shi,t3fuwuhuimorenkaiqi。juticaozuoruxia:

  • 亚博买球diyibu:jinruweblogickongzhitai,zaibase_domaindepeizhiyemianzhong,jinru“anquan”xuanxiangkayemian,dianji“shaixuanqi”,jinrulianjieshaixuanqipeizhi。

  • dierbu:zailianjieshaixuanqizhongshuru:weblogic.security.net.connectionfilterimpl,zailianjieshaixuanqiguizezhongshuru:127.0.0.1 * * allow t3 t3s,0.0.0.0/0 * * deny t3 t3s(t3het3sxieyidesuoyouduankouzhiyunxubendifangwen)。

  • disanbu:baocunhouxuzhongxinqidong,guizefangkeshengxiao。

亚博买球3、shengjidaojdk-8u20yishangdebanben。

亚博买球

banquansuoyou:yabomaiqiu

亚博买球dizhi:hubeishengwuhanshihongshanquluoyulu1037hao youbian:430074 dianhua: chuanzhen:

亚博APP 亚博APP 亚博APP 亚博APP 亚博APP 亚博APP