Weblogic RCE in one request CVE-2020-14882

Weblogic RCE in one request CVE-2020-14882

[@linuxlove1912]

Congratulations ... Great work ..!!

[@NhocKidz]

hay quá a ơi

[@kingsec4535]

nice

[@JoelFabiani]

wow

[@pedroortiz8499]

nice 2

[@xavi1911]

What is this?

[@murphyia1980]

Sweet. WebLogic is Swiss cheese... can this exploit be used when it's deployed over HTTPS?

[@17019494]

Yes it can!

[@murphyia1980]

@@17019494 Cool! Although hopefully folks aren't deploying the console/port 7001 on anything "publicly" available!

[@user-ot7tu2nk3l]

com.tangosol.coherence.mvel2.sh.ShellSession not work on weblogic 10
how to bypass it and run rce?