CVE-2015-4852: Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code execution.
Other sources
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oraclecommon/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.
— Ubuntu
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libcommons-collections3-javato a version that resolves this vulnerability.Fixed in 3.2.1-6ubuntu0.1~ - Upgrade
Upgrade
ubuntu/libcommons-collections3-javato a version that resolves this vulnerability.Fixed in 3.2.2 - Upgrade
Upgrade
ubuntu/libcommons-collections4-javato a version that resolves this vulnerability.Fixed in 4.1
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4852?
The severity of CVE-2015-4852 is considered critical due to its potential for remote code execution.
How do I fix CVE-2015-4852?
To fix CVE-2015-4852, you should upgrade to patched versions of Oracle WebLogic Server or the affected libraries if applicable.
Which versions are affected by CVE-2015-4852?
CVE-2015-4852 affects Oracle WebLogic Server versions 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0.
Can CVE-2015-4852 be exploited remotely?
Yes, CVE-2015-4852 can be exploited remotely by attackers to execute arbitrary code.
What components are involved in CVE-2015-4852?
CVE-2015-4852 involves the WLS Security component in Oracle WebLogic Server and the Apache Commons library.