An Interest In:
Web News this Week
- April 24, 2024
- April 23, 2024
- April 22, 2024
- April 21, 2024
- April 20, 2024
- April 19, 2024
- April 18, 2024
Some of Our Sources
- Slashdot
- Simplebits
- Smashing Magazine
- Inspiredology
- Naldz Graphics
- FanExtra - PSD
- Stylized Web
- Android Dissected
- Codrops
- Hashedout
Help Webnuz
Referal links:
June 19, 2019 10:10 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/pHMwh38hjvQ/oracle-issues-emergency-update-to-patch-actively-exploited-weblogic-law
Oracle Issues Emergency Update To Patch Actively Exploited WebLogic Law
An anonymous reader quotes a report from Ars Technica: Oracle on Tuesday published an out-of-band update patching a critical code-execution vulnerability in its WebLogic server after researchers warned that the flaw was being actively exploited in the wild. The vulnerability, tracked as CVE-2019-2729, allows an attacker to run malicious code on the WebLogic server without any need for authentication. That capability earned the vulnerability a Common Vulnerability Scoring System score of 9.8 out of 10. The vulnerability is a deserialization attack targeting two Web applications that WebLogic appears to expose to the Internet by default -- wls9_async_response and wls-wsat.war. The flaw in Oracle's WebLogic Java application servers came to light as a zero-day four days ago when it was reported by security firm KnownSec404.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/pHMwh38hjvQ/oracle-issues-emergency-update-to-patch-actively-exploited-weblogic-law
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot