I Oracle vurderede alvor opstået problem og lancerede uplanlagt patch til WebLogic-server

Ved udgangen af ​​sidste uge, eksperter fra kinesisk KnownSec 404 virksomhed, der står bag tingenes internet-søgeperson ZoomEye udvikling, opdaget dangerous issue in Oralce WebLogic.

Bug presented a threat for all Oracle WebLogic servers with running components WLS9_ASYNC and WLS-WSAT. Første komponent er nødvendig for at udføre asynkrone operationer, mens den anden er praktisk beskyttelse.

Vulnerability is linked with deserialization and allows remote attacker to achieve execution of any commands without authorization (with the help of special HTTP-request).

Situations was complicated by the fact that intruders have already used this issue. As Oracle launched quarterly set of patches for its products relatively recently, specialists suggested that patch for 0-day vulnerability will arrive only in June 2019 as a part of next quarterly set of updates.

Heldigvis, experts were wrong this time. Oracle made untypical gesture and presented urgent unplanned patch for this issues. Vulnerability got identifier CVE-2019-2725 and scored 9.8 points in 10-point CVSS vulnerability scale.

As issue is immensely serious, developers urge users to install updates as soon as possible.

Due to the severity of this vulnerability, Oracle strongly recommends that customers apply the updates provided by this Security Alert as soon as possible”, – wrote Oracle developers

Kilde: https://www.oracle.com

Om Trojan Killer

Carry Trojan Killer Portable på din memory stick. Vær sikker på, at du er i stand til at hjælpe din pc modstå eventuelle cyber trusler, hvor du går.

Tjek også

MageCart på Heroku Cloud Platform

Forskere har fundet flere MageCart Web Forplove On Heroku Cloud Platform

Forskere ved Malwarebytes rapporteret om at finde flere MageCart web skummere på Heroku cloud-platform …

Android Spyware CallerSpy

CallerSpy spyware masker som en Android chat applikation

Trend Micro eksperter opdagede malware CallerSpy, hvilke masker som en Android chat program og, …

Skriv et svar