Vulnerability Details : CVE-2016-0492
Public exploit exists!
Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Load Testing for Web Apps, a different vulnerability than CVE-2016-0488. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a directory traversal vulnerability in the isAllowedUrl function, which allows remote attackers to bypass authentication via directory traversal sequences following a URI entry that does not require authentication, as demonstrated by olt/Login.do/../../olt/UploadFileUpload.do.
Vulnerability category: Directory traversal
Exploit prediction scoring system (EPSS) score for CVE-2016-0492
Probability of exploitation activity in the next 30 days: 97.12%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 100 % EPSS Score History EPSS FAQ
Metasploit modules for CVE-2016-0492
-
Oracle ATS Arbitrary File Upload
Disclosure Date: 2016-01-20First seen: 2020-04-26exploit/multi/http/oracle_ats_file_uploadThis module exploits an authentication bypass and arbitrary file upload in Oracle Application Testing Suite (OATS), version 12.4.0.2.0 and unknown earlier versions, to upload and execute a JSP shell. Authors: - Zhou Yu - wvu <wvu@metasploit.com>
CVSS scores for CVE-2016-0492
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
6.4
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:P/A:N |
10.0
|
4.9
|
NIST |
References for CVE-2016-0492
-
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
Oracle Critical Patch Update - January 2016Vendor Advisory
-
http://www.securitytracker.com/id/1034734
Oracle Enterprise Manager Grid Control Multiple Flaws Let Remote and Local Users Access Data, Modify Data, and Deny Service - SecurityTrackerThird Party Advisory;VDB Entry
-
http://www.securityfocus.com/bid/81158
Oracle Enterprise Manager CVE-2016-0492 Authentication Bypass VulnerabilityThird Party Advisory;VDB Entry
-
https://www.exploit-db.com/exploits/39691/
Oracle Application Testing Suite (ATS) 12.4.0.2.0 - Authentication Bypass / Arbitrary File UploadExploit;Third Party Advisory;VDB Entry
-
http://packetstormsecurity.com/files/137175/Oracle-ATS-Arbitrary-File-Upload.html
Oracle ATS Arbitrary File Upload ≈ Packet StormExploit;Third Party Advisory;VDB Entry
-
https://www.exploit-db.com/exploits/39852/
Oracle Application Testing Suite (ATS) - Arbitrary File Upload (Metasploit)Exploit;Third Party Advisory;VDB Entry
-
http://www.rapid7.com/db/modules/exploit/multi/http/oracle_ats_file_upload
Oracle ATS Arbitrary File UploadThird Party Advisory;VDB Entry
-
http://www.zerodayinitiative.com/advisories/ZDI-16-042
ZDI-16-042 | Zero Day InitiativeThird Party Advisory;VDB Entry
Products affected by CVE-2016-0492
- cpe:2.3:a:oracle:application_testing_suite:12.5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:application_testing_suite:12.4.0.2:*:*:*:*:*:*:*