Sploitus

Exploit for CVE-2020-14882

gitee · 2021-05-09

Exploit Code

MARKDOWN10 lines
## https://sploitus.com/exploit?id=91D1104D-BBE5-513C-9816-6F654D9AD6AC
CVE-2020-14882 is a vulnerability in Oracle WebLogic Server. The vulnerability allows for unauthorized access and remote code execution. The vulnerability is caused by a flaw in the way the server handles certain types of requests, which can be exploited by an attacker to gain access to sensitive information and execute arbitrary code.

The vulnerability is present in the WebLogic Server's MBeanUtilsInitSingleFileServlet class, which is responsible for initializing single-file servlets. The class contains a flaw that allows an attacker to inject malicious code into the server, which can be executed with elevated privileges.

To exploit the vulnerability, an attacker would need to send a specially crafted request to the server, which would cause the MBeanUtilsInitSingleFileServlet class to execute the malicious code. The vulnerability can be exploited remotely, making it a significant security risk.

The vulnerability was discovered by a researcher and reported to Oracle, who has since released a patch to fix the issue. The patch is available for download from the Oracle website, and it is recommended that all users of WebLogic Server apply the patch as soon as possible to prevent exploitation of the vulnerability.

In addition to the patch, Oracle has also released a set of best practices for securing WebLogic Server, which includes recommendations for configuring the server to prevent exploitation of the