BEA WebLogic Administration Console Cross-Site Scripting Vulnerability

vendor:

WebLogic Server

by:

SecurityFocus

3.1

CVSS

MEDIUM

Cross-Site Scripting

CWE

Product Name: WebLogic Server

Affected Version From: Unknown

Affected Version To: Unknown

Patch Exists: YES

Related CWE: CVE-2005-3106

CPE: a:bea:weblogic_server

Metasploit: https://www.rapid7.com/db/vulnerabilities/linuxrpm-CESA-2006-0101/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2006-0101/

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Unknown

2005

BEA WebLogic Administration Console Cross-Site Scripting Vulnerability

BEA WebLogic administration console is prone to cross-site scripting attacks. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. An attacker can make a HTTP request containing XSS code to a target Web server, login into the Administration console, go to the menu 'Network configurations/servers/myserver/', click on 'View server log' and search for the string GomoR and click on the BEA-id event.

Mitigation:

Ensure that user-supplied input is properly sanitized before being used in the generation of dynamic content.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/14657/info

BEA WebLogic administration console is prone to cross-site scripting attacks.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

1. Make a HTTP request containing XSS code to a target Web server

$ printf "GET /<script>alert(document.cookie)</script>GomoR HTTP/1.0\r\n\r\n" | nc www.example.com 80

2. Login into the Administration console
3. Go to the menu 'Network configurations/servers/myserver/'
4. Click on 'View server log'
5. Search for the string GomoR and click on the BEA-id event.