Main Vulnerability Database Vulnerabilities #VU13906

Privilege escalation in Oracle WebLogic Server - CVE-2018-2894

Published: July 17, 2018 / Updated: April 7, 2020

Vulnerability identifier: #VU13906

CSH Severity: Low

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-2894

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to gain elevated privileges on the target system on the target system.

The vulnerability exists due to flaw in the Oracle WebLogic Server WLS - Web Services component. A remote unauthenticated attacker can gain elevated privileges.

Affected software

Oracle WebLogic Server

How to mitigate CVE-2018-2894

Install update from vendor's website.

Links to Public Exploits and PoC-codes

Exploit #2312 - exphub (Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340) (April 7, 2020)

External References

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Related Security Bulletins

Privilege escalation in Oracle WebLogic Server