OracleOTM

OracleOTM CVE-2021-35616をエクスプロイトするためのPythonツール スクリプトはモジュールで動作し、以下の順序で実装しています。 ► ユーザー名列挙 ► デフォルト認証情報の検索 ► DBXMLサーブレットを使用したSQLクエリの実行 ► 完全なエクスプロイトとJSP実行 スクリプトの構文は次のとおりです。 .\OracleOTM.py module host TXT file additional parameters ユーザー名列挙: .\OracleOTM.py enum hosts TXT file -u users.txt デフォルト認証情報の検索:...

Oracle Transportation Management Privilege Escalation (CVE-2021-35616)

A privilege escalation exists in Oracle Transportation Management. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

CVE-2021-35616

creationtimestamp| type| source ---|---|--- 2021-12-03 14:04:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/899 2021-12-03 15:07:24+00:00| published-proof-of-concept| https://t.me/hackertrick/513 2021-12-03 15:27:03+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/126...

CVE-2021-35616

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: UI Infrastructure. The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation...

CVE-2021-35616

CVE-2021-35616 affects Oracle Transportation Management (OTM), UI Infrastructure, version 6.4.3. A low-privilege, network-based attacker can exploit via HTTP to achieve unauthorized read, update, insert or delete of data, as described in the CVE. The base impact includes Confidentiality and Integ...