97¹ú¼Ê

¹¤³§ÑÐѧ Ø­ 97¹ú¼ÊÍøÂçÊý×Ö»¯ÖÇÄܹ¤³§¡°ºÚ¿Æ¼¼¡±´ó½ÒÃØ
Ô¤Ô¼Ö±²¥
¾Ü¾øÓªÒµ¡°µôÁ´×Ó¡±£º2025 97¹ú¼ÊÍøÂç ¡°½µ¹ÊÕÏ?Ç¿·À»¤¡± ÐÐÒµÔËάʵս½»Á÷»á
Ô¤Ô¼Ö±²¥
97¹ú¼Êî£Ò× 97¹ú¼Ê¹Ù·½É̳Ç
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

ÖÐÎÄ

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
  • Global / English
  • France / Fran?ais
  • Germany / Deutsch
  • Indonesia / Indonesian
  • Italy / Italiano
  • Japan / ÈÕ±¾ÕZ
  • Kazakhstan / P§å§ã§ã§Ü§Ú§Û
  • Poland / Polski
  • Portugal / Portugu¨ºs
  • Spain / Espa?ol (Espa?a)
  • Thailand / ???????
  • Vietnam / Vi?t Nam
  • LATAM / Espa?ol
    (Am¨¦rica Latina)
  • T¨¹rkiye / T¨¹rk?e
  • Brazil / Portugu¨ºs(Brazil)
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
²úÆ·
< ·µ»ØÖ÷²Ëµ¥
²úÆ·ÖÐÐÄ
²úÆ·

½»Á÷»ú

½»Á÷»úËùÓвúÆ·
< ·µ»Ø²úÆ·
½»Á÷»úÖ÷Ò³
½»Á÷»ú

ÎÞÏß

ÎÞÏßËùÓвúÆ·
< ·µ»Ø²úÆ·
ÎÞÏßÖ÷Ò³
ÎÞÏß

ÎÞÏß¹ÜÀíÓëÓ¦ÓÃ

ÔÆ×ÀÃæ

ÔÆ×ÀÃæ²úÆ·¼Æ»®ÖÐÐÄ
< ·µ»Ø²úÆ·
ÔÆ×ÀÃæÖ÷Ò³
ÔÆ×ÀÃæ

Çå¾²

Çå¾²ËùÓвúÆ·
< ·µ»Ø²úÆ·
Çå¾²Ö÷Ò³
Çå¾²

ËùÓÐÊÖÒÕ½â¾ö¼Æ»®

·þÎñ²úÆ·

·þÎñ²úÆ·ËùÓвúÆ·
< ·µ»Ø²úÆ·
·þÎñ²úÆ·Ö÷Ò³
·þÎñ²úÆ·
·þÎñÖ§³Ö
< ·µ»ØÖ÷²Ëµ¥
·þÎñÓëÖ§³ÖÖÐÐÄ
·þÎñÓëÖ§³Ö
·þÎñ¹¤¾ß
·þÎñƽ̨
  • ÔÆ×ÀÃæ·þÎñƽ̨
  • î£Ò×·þÎñƽ̨
  • ºÏ×÷»ï°é·þÎñƽ̨
½Ìѧ·þÎñ
  • 97¹ú¼ÊICTÈ˲ŽÌÓýÖÐÐÄ
  • УÆóºÏ×÷
  • ÈÏ֤ϵͳ
  • ÅàѵÍýÏë
ºÏ×÷»ï°é
< ·µ»ØÖ÷²Ëµ¥
ºÏ×÷»ï°éÖÐÐÄ
ºÏ×÷»ï°é
³ÉΪ97¹ú¼Ê»ï°é
ÊÛǰӪÏú
  • Êг¡×ÊÁÏ¿â(ºÏ×÷»ï°é)
  • 97¹ú¼Ê²úÆ·ÉèÖÃÆ÷
  • ÓªÏú×ÊÁÏÆ½Ì¨
  • ÊÛǰÈÏÖ¤
  • ÊÛǰ¹¤¾ß°ü
  • ºÏ×÷»ï°éÀñÎï¿â
  • e-Learning
  • ²úÆ·×ÊÖÊÅÌÎÊ
  • Ô¶³ÌPOC
ÏúÊÛÓë¶©µ¥
ÊÛºó¼°·þÎñ
  • ÊÛºóÈÏÖ¤
  • Êۺ󹤾߰ü
  • RSDP 97¹ú¼Ê·þÎñ½»¸¶Æ½Ì¨
  • ÊÛºó·þÎñÈÏÖ¤
  • ÊÛºó֪ʶƽ̨
  • ÇþµÀ·þÎñ¹ÜÀíϵͳ£¨CSM£©
  • SMBÇþµÀ¿Í»§·þÎñƽ̨£¨CCSP£©
Óû§ÖÐÐÄ
  • ϵͳָµ¼´óÈ«
  • Õ˺ŹÜÀí
  • ÏÂÔØµç×ÓÊÚÈ¨ÅÆ
  • ǩԼÐÅÏ¢Éó²é
  • ×ÊÖÊÅÌÎÊ
  • ǩչÜÀí
  • ·µÀû¹ÜÀí
  • î£Ò×ÊÖÒÕÈÏÖ¤ÅÌÎÊ
·µ»ØÖ÷²Ëµ¥
Ñ¡ÔñÇøÓò/ÓïÑÔ
  • Global / English
  • Japan / ÈÕ±¾ÕZ
  • T¨¹rkiye / T¨¹rk?e
  • Vietnam / Vi?t Nam
  • Indonesia / Indonesian
  • Thailand / ???????
  • Spain / Espa?ol (Espa?a)
  • Portugal / Portugu¨ºs
  • France / Fran?ais
  • Poland / Polski
  • Kazakhstan / P§å§ã§ã§Ü§Ú§Û
  • Germany / Deutsch
  • Italy / Italiano
  • Brazil / Portugu¨ºs(Brazil)
  • LATAM / Espa?ol (Am¨¦rica Latina))
  • 97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

    Îó²îÓ¦¼±|Oracle Weblogic ServerÔ¶³Ì´úÂëÖ´ÐÐÎó²î£¨CVE-2021-2109£©

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾ Ðû²¼Ê±¼ä£º2021-01-25
    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

    ¿ËÈÕ£¬97¹ú¼ÊÍøÂçCERTÇå¾²Ó¦¼±ÏìÓ¦ÍŶӹØ×¢µ½Oracle¹Ù·½Ðû²¼ÁË2021Äê1ÔÂÒªº¦²¹¶¡¸üÐÂͨ¸æ£¬¸Ã²¹¶¡ÖÐÐÞ²¹Á˰üÀ¨ CVE-2021-2109 Weblogic ServerÔ¶³Ì´úÂëÖ´ÐÐÎó²îÔÚÄڵĶà¸ö¸ßΣÑÏÖØÎó²î¡£ÔÚCVE-2021-2109Îó²îÖУ¬¹¥»÷Õ߿ɽṹ¶ñÒâÇëÇó£¬Ôì³ÉJNDI×¢Èë¡¢Ö´ÐÐí§Òâ´úÂ룬´Ó¶ø¿ØÖÆ·þÎñÆ÷¡£

     

    Õë¶ÔÒÔÉÏÎó²î£¬97¹ú¼ÊÇå¾²Äܹ»¾ÙÐÐÎó²îɨÃèÓë¼ì²â£¬²¢×öÇå¾²·À»¤¡£

     

    Îó²î¸´ÏÖ

     

    • ÇéÐΣºWebLogic10.3.6.0.0

    • »á¼û¿ØÖÆÌ¨½çÃæ»á¼û

      http://192.168.102:49163/console¼´¿É¿´µ½Ò³Ãæ

       

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

     

    • µÇ¼֮ºó½øÈ룺

     

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

     

    • Æô¶¯LDAP:

       

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

     

    • POC¾ç±¾:

     

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

     

    • Æô¶¯POC£¬²¢·¢ËÍ£º

     

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

     

    ÊÜÓ°Ïìϵͳ

     

    Oracle WebLogic Server 14.1.1.0.0
    Oracle WebLogic Server 12.2.1.4.0
    Oracle WebLogic Server 12.2.1.3.0
    Oracle WebLogic Server 12.1.3.0.0
    Oracle WebLogic Server 10.3.6.0.0

     

    ¹Ù·½²¹¶¡

     

    OracleÒѾ­Îª´ËÐû²¼ÁËÒ»¸öÇ徲ͨ¸æ£¨2021-01-19£©ÒÔ¼°ÏìÓ¦²¹¶¡:
    2021-01-19£ºOracle Critical Patch Update Advisory -January 2021

    Á´½Ó£ºhttps://www.oracle.com/security-alerts/cpujan2021.html

     

    97¹ú¼ÊÍøÂçÇå¾²ÆÀ¹ÀÓë¼ì²â¡¢·À»¤²úÆ·

     

    ²úÆ·

    ˵Ã÷

    RG-WALLϵÁÐÏÂÒ»´ú

    ·À»ðǽ

     

    ÏÂÒ»´ú·À»ðǽÍŽá·À²¡¶¾ÒÔ¼°ÍþвÇ鱨¼ì²â¡£ÔÚÇå¾²ÄÜÁ¦ÉÏ£¬²»µ«Ö§³ÖNAT¡¢ACL¡¢DDoS·ÀÓùµÈ¹Å°åÇå¾²¹¦Ð§£¬Ò²Ö§³Ö¸»ºñµÄÓ¦Óü¶Çå¾²¹¦Ð§£¬°üÀ¨²¡¶¾²éɱ¡¢ÈëÇÖ¼ì²â¡¢APP¼ì²â¡¢Îļþ¹ýÂË¡¢¶ñÒâURL¹ýÂ˵È¡£Ìṩ¶àά¶ÈµÄÓ¦Óòã¼à¿ØÓëÆÊÎö£¬×ÊÖúÓû§ÕÆÎÕΣº¦£¬¾«×¼Ô¤¾¯¡£

    RG-IDPϵÁÐÈëÇÖ¼ì²â

    ·ÀÓùϵͳ

    97¹ú¼ÊÍøÂçÍÆ³öµÄ½«Éî¶ÈÄÚÈݼì²â¡¢Çå¾²·À»¤¡¢ÉÏÍøÐÐΪ¹ÜÀíµÈÊÖÒÕÍŽáµÄÈëÇÖ¼ì²â·ÀÓùϵͳװ±¸¡£Í¨¹ý¶ÔÍøÂçÖÐÉî²ã¹¥»÷ÐÐΪ¾ÙÐÐ׼ȷµÄÆÊÎöÅжÏ£¬×Ô¶¯ÓÐÓõı £»¤ÍøÂçÇå¾²¡£ÅäºÏʵʱ¸üеÄÈëÇÖ¹¥»÷ÌØÕ÷¿â£¬¿É¼ì²â·À»¤3500ÖÖÒÔÉϵÄÍøÂç¹¥»÷ÐÐΪ£¬°üÀ¨DoS/DDoS¡¢²¡¶¾¡¢È䳿¡¢½©Ê¬ÍøÂ硢ľÂí¡¢¿ÉÒÉ´úÂ롢̽²âÓëɨÃèµÈÖÖÖÖÍøÂçÍþв¡£

    RG-ScanϵÁÐÎó²îÆÀ¹Àϵͳ

    RG-Scanͨ¹ý¶ÔϵͳÎó²î¡¢·þÎñºóÃÅ¡¢ÍøÒ³¹ÒÂí¡¢SQL×¢ÈëÎó²îÒÔ¼°¿çÕ¾¾ç±¾µÈ¹¥»÷ÊֶζàÄêµÄÑо¿»ýÀÛ£¬×ܽá³öÁËÖÇÄÜÖ÷»ú·þÎñ·¢Ã÷¡¢ÖÇÄÜ»¯ÅÀ³æºÍSQL×¢Èë״̬¼ì²âµÈÊÖÒÕ£¬¿ÉÒÔͨ¹ýÖÇÄܱéÀú¹æÔò¿âºÍ¶àÖÖɨÃèÑ¡Ïî×éºÏµÄÊֶΣ¬ÉîÈë׼ȷµÄ¼ì²â³öϵͳºÍÍøÕ¾Öб£´æµÄÎó²îºÍÈõµã¡£

    RG-WG  WEBGuardÓ¦Óñ £»¤ÏµÍ³

    97¹ú¼ÊRG-WG WebGuardÓ¦Óñ £»¤ÏµÍ³£¬Í¨¹ý¶ÔÊÕÖ§Web·þÎñÆ÷µÄHTTP/HTTPSÁ÷Á¿Ïà¹ØÄÚÈݵÄʵʱÆÊÎö¼ì²â¡¢¹ýÂË£¬À´×¼È·Åжϲ¢×èÖ¹ÖÖÖÖWebÓ¦ÓÃÈëÇÖÐÐΪ£¬×è¶Ï¶ÔWeb·þÎñÆ÷µÄ¶ñÒâ»á¼ûÓë²»·¨²Ù×÷¡£

     

    ÆäÖУ¬WEBGuardÓ¦Óñ £»¤ÏµÍ³ÉèÖÃÕ½ÂÔ£º

    °ì·¨1£ºµÇ¼WG WEB¹ÜÀí½çÃæ

    °ì·¨2£ºÔÚ“»á¼û¿ØÖÆ-URLºÚÃûµ¥”Ìí¼ÓÈçÏÂÕ½ÂÔ

     

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

     

     

    Ô´IP

    0.0.0.0

    WebÖ÷»ú

    ¿Õ

    URL

    /console/consolejndi.portal

     

    °ì·¨3£º¼ì²éÉèÖÃЧ¹û

     

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

     

    Çå¾²½¨Òé

     

     

    1.  ½ûÓÃT3ЭÒ飺

     

    ÈôÊÇÄú²»ÒÀÀµT3ЭÒé¾ÙÐÐJVMͨѶ£¬¿Éͨ¹ýÔÝʱ×è¶ÏT3ЭÒ黺½â´ËÎó²î´øÀ´µÄÓ°Ïì

     

    • ½øÈëWeblogic¿ØÖÆÌ¨£¬ÔÚbase_domainÉèÖÃÒ³ÃæÖУ¬½øÈë“Çå¾²”Ñ¡Ïî¿¨Ò³Ãæ£¬µã»÷“ɸѡÆ÷”£¬ÉèÖÃɸѡÆ÷¡£

       

    • ÔÚÅþÁ¬É¸Ñ¡Æ÷ÖÐÊäÈ룺weblogic.security.net.ConnectionFilterImpl£¬ÔÚÅþÁ¬É¸Ñ¡Æ÷¹æÔò¿òÖÐÊäÈ룺* * 7001 deny t3 t3s¡£

     

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

     

     

    2.  Õ¥È¡ÆôÓÃIIOP£º

     

    Éϰ¶Weblogic¿ØÖÆÌ¨£¬ÕÒµ½ÆôÓÃIIOPÑ¡Ï×÷·Ï¹´Ñ¡£¬ÖØÆôÉúЧ¡£

     

     

     

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

     

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

     

    3.  ÔÝʱ¹Ø±Õºǫ́/console/console.portal¶ÔÍâ»á¼û

     

    ÍŶÓÏÈÈÝ

     

    97¹ú¼ÊÍøÂçCERTÇå¾²Ó¦¼±ÏìÓ¦ÍŶÓ£¬¸ú×Ù×îл¥ÁªÍøÍþвÊÂÎñ£¬Õë¶Ô×îÐÂÇå¾²Îó²î£¬APT¹¥»÷ÒÔ¼°½©Ê¬ÍøÂç¼Ò×å×öʵʱ¸ú×ÙºÍÆÊÎö;Ϊ²úÆ·¡¢¿Í»§Ìṩʵʱ¡¢ÓÐÓõÄÇå¾²·À»¤Õ½ÂÔÓë½â¾ö¼Æ»®¡£

     

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

     

    97¹ú¼Ê“ÍøÂç+Çå¾²”Ö÷ÕŽ«ÍøÂç×°±¸µÄÇå¾²ÄÜÁ¦³ä·ÖÑéÕ¹£¬ÍøÂç×°±¸¡¢Çå¾²×°±¸ÓëÇ徲ƽ̨ÖÇÄÜÁª¶¯£¬Àë±ðÇå¾²¹Âµº£¬×é³ÉÕûÍøÁª¶¯µÄÇå¾²°ü¹Üϵͳ£¬ÊµÏÖ·À»¤¡¢Çå¾²Õ¹Íû¡¢ÆÊÎöºÍÏìÓ¦µÈÇå¾²ÎÊÌâ×Ô¶¯»¯È«Á÷³Ì±Õ»·¡£

     

    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

     

    ÈçÄúÐèÒª97¹ú¼ÊÇå¾²£¬ÇëÁôÏÂÄúµÄÁªÏµ·½·¨

     

    ¹Ø×¢97¹ú¼Ê
    ¹Ø×¢97¹ú¼Ê¹ÙÍøÎ¢ÐÅ
    ËæÊ±Ïàʶ¹«Ë¾×îж¯Ì¬
    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

    ·µ»Ø¶¥²¿

    ÊÕÆð
    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
    97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
    ÇëÑ¡Ôñ·þÎñÏîÄ¿
    ¹Ø±Õ×Éѯҳ
    ÊÛǰ×Éѯ ÊÛǰ×Éѯ
    ÊÛǰ×Éѯ
    ÊÛºó·þÎñ ÊÛºó·þÎñ
    ÊÛºó·þÎñ
    Òâ¼û·´Ïì Òâ¼û·´Ïì
    Òâ¼û·´Ïì
    ¸ü¶àÁªÏµ·½·¨
    ÍøÕ¾µØÍ¼