Oracle WebLogic Server Node Manager Security Bypass

Secunia ID	SA38345
Release Date	25 Jan 2010
Criticality	Less Critical
Solution Status	Unpatched
Software	BEA WebLogic Server 10.x
Where	From local network
Impact	Security Bypass This covers vulnerabilities or security issues where malicious users or people can bypass certain security mechanisms of the application. The actual impact varies significantly depending on the design and purpose of the affected application.
Description	A vulnerability has been reported in Oracle WebLogic Server, which can be exploited by malicious people to bypass certain security restrictions. The vulnerability is caused due to an improper authentication mechanism within the "Node Manager" process (beasvc.exe) and can be exploited to invoke certain commands on an affected system. The vulnerability is reported in version 10.3.2. Other versions may also be affected.
Solution	Restrict network access to the "Node Manager" service (by default port 5556/TCP).
Reported by	Reportedly a module for VulnDisco Pack.
Original Advisory	http://intevydis.blogspot.com/2010/01/oracle-weblogic-1032-node-manager-fun.html