WebLogic

A WebLogic Vulnerability Highlights the Path-Based Authorization Dilemma

| | Authentication, Exploits, VERT, vulnerability, WebLogic
A WebLogic server vulnerability fixed by the October CPU has come under active exploitation after a Vietnamese language blog post detailed the steps needed to bypass authentication and achieve remote code execution ...
The State of Security
Patch for Critical Oracle WebLogic Vulnerability Can Be Bypassed

Patch for Critical Oracle WebLogic Vulnerability Can Be Bypassed

| | CVE-2018-2628, deserialization, Microsoft Outlook, PDF files, WebLogic, Windows SMB
Security researchers warn that a patch recently released by Oracle for a critical vulnerability in its WebLogic Java application server can easily be bypassed. The risk of exploitation is high especially since ...
Security Boulevard