Oracle Issues Emergency WebLogic Fix

Application Security | News | Kara Reeder, Monday, February 8, 2010
Application Security, Oracle, Vulnerabilities and Patches
Just weeks after a Russian security researcher posted details of a vulnerability in Oracle's WebLogic application server, the company is pushing out an emergency patch.

According to Computerworld, the flaw is in WebLogic's Node Manager software. Oracle admits that if a hacker gains access to the administrator's port, the results could be devastating:

A successful exploitation of this vulnerability may result in a full compromise of the targeted server on Windows. On other platforms (Unix, Linux, etc.), the attacker may gain access to the targeted server with the same privileges as the WebLogic server processes.

The flaw affects WebLogic versions 7 and higher. Oracle recommends that the fix be applied as soon as possible.

Comments (0) Bookmark and Share

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
  • Allowed HTML tags: <b> <i>

More information about formatting options