{"id":28772,"date":"2024-04-18T07:57:30","date_gmt":"2024-04-18T07:57:30","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=28772"},"modified":"2026-04-17T18:07:38","modified_gmt":"2026-04-17T18:07:38","slug":"weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/","title":{"rendered":"WebLogic T3\/IIOP Information Disclosure Vulnerability (CVE-2024-21006\/CVE-2024-21007)"},"content":{"rendered":"<!DOCTYPE html PUBLIC \"-\/\/W3C\/\/DTD HTML 4.0 Transitional\/\/EN\" \"http:\/\/www.w3.org\/TR\/REC-html40\/loose.dtd\">\n<html><body><h2 class=\"wp-block-heading\">Overview<\/h2>\n\n\n\n<p>Recently, NSFOCUS CERT detected that Oracle has released a security announcement and fixed two information disclosure vulnerabilities (CVE-2024-21006\/CVE-2024-21007) in Oracle WebLogic Server. Due to the defects of T3\/IIOP protocol, unauthenticated attackers can send malicious requests through servers affected by T3\/IIOP protocol. Access to sensitive information on the target system. Affected users should take measures for protection as soon as possible. <\/p>\n\n\n\n<p>Reference link: <\/p>\n\n\n\n<p><a href=\"https:\/\/www.oracle.com\/security-alerts\/cpuapr2024.html\">https:\/\/www.oracle.com\/security-alerts\/cpuapr2024.html<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Scope of Impact<\/h2>\n\n\n\n<p><strong>Affected Version<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>WebLogic&nbsp;Server&nbsp;12.2.1.4.0<\/li>\n\n\n\n<li>WebLogic&nbsp;Server&nbsp;14.1.1.0.0<\/li>\n<\/ul>\n\n\n\n<p>Note: The above is the product version that Oracle officially supports maintenance at present, and multiple old versions of WebLogic Server such as 10.3.6.0, 11.1.1.9 and 12.1.3.0 have stopped maintenance.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Detection<\/h2>\n\n\n\n<p><strong>Local detection<\/strong><\/p>\n\n\n\n<p>Users can run the following command to check whether the WebLogic version and patch have been installed.<\/p>\n\n\n\n<div class=\"wp-block-group has-cyan-bluish-gray-background-color has-background\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<p>$ cd \/Oracle\/Middleware\/wlserver_10.3\/server\/lib <\/p>\n\n\n\n<p>$ java -cp weblogic.jar &Acirc;&nbsp; weblogic.version<\/p>\n<\/div><\/div>\n\n\n\n<p>If no patch installation information is displayed in the output, a risk exists, as shown in the following figure.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418a.jpg\"><img fetchpriority=\"high\" decoding=\"async\" width=\"567\" height=\"127\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418a.jpg\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-28773\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418a.jpg 567w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418a-300x67.jpg 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418a-200x45.jpg 200w\" sizes=\"(max-width: 567px) 100vw, 567px\" \/><\/a><\/figure>\n\n\n\n<p><strong>T3 protocol detection<\/strong><\/p>\n\n\n\n<p>The Nmap tool provides a scanning script for the WebLogic T3 protocol to detect WebLogic hosts that enable the T3 service. The command is as follows:<\/p>\n\n\n\n<p class=\"has-cyan-bluish-gray-background-color has-background\">nmap -n -v -Pn &acirc;&euro;&ldquo;sV [host or network segment address] -p7001,7002 &#8211;script=weblogic-t3-info.nse<\/p>\n\n\n\n<p>As shown in the red mark of the following figure, the target has enabled T3 protocol and WebLogic version is within the affected range. If relevant personnel do not install official security patches, there will be a vulnerability risk.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418b.jpg\"><img decoding=\"async\" width=\"466\" height=\"469\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418b.jpg\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-28775\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418b.jpg 466w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418b-298x300.jpg 298w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418b-150x150.jpg 150w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418b-230x230.jpg 230w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418b-200x201.jpg 200w\" sizes=\"(max-width: 466px) 100vw, 466px\" \/><\/a><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Mitigation<\/h2>\n\n\n\n<p><strong>Patch update<\/strong><\/p>\n\n\n\n<p>At present, Oracle has released patches to fix the above vulnerabilities. Please refer to the official notice to download the updated patch of the affected product in time, and install the update by referring to the readme file in the patch installation package to ensure long-term effective protection. Download link: <a href=\"https:\/\/support.oracle.com\/rs?type=doc&amp;id=3011291.2\">https:\/\/support.oracle.com\/rs?type=doc&amp;id=3011291.2<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Temporary Measures<\/h2>\n\n\n\n<p>If the user cannot install the update patch temporarily, take the following measures for temporary protection:<\/p>\n\n\n\n<p><strong>Restrict T3 protocol access<\/strong><\/p>\n\n\n\n<p>Users can temporarily block attacks that exploit T3 protocol vulnerabilities by controlling access to the T3 protocol. WebLogic Server provides a default connection filter named weblogic.security.net.ConnectionFilterImpl, which accepts all incoming connections. Access control can be performed on T3 and T3s protocols through the configuration rules of this connection filter. The detailed operation steps are as follows:<\/p>\n\n\n\n<p>1. Go to the WebLogic console. On the configuration page of base_domain, go to the Security tab page and click Filters to configure connection filters.<\/p>\n\n\n\n<p>2. Enter weblogic.security.net.ConnectionFilterImpl in the connection filter, and configure rules conforming to the actual situation of the enterprise in the connection filter rule by referring to the following writing:<\/p>\n\n\n\n<div class=\"wp-block-group has-cyan-bluish-gray-background-color has-background\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<p>127.0.0.1 * * allow t3 t3s<\/p>\n\n\n\n<p>Local IP ** allow t3 t3s<\/p>\n\n\n\n<p>IP allowed to be accessed&Acirc;&nbsp; * * allow t3 t3s&Acirc;&nbsp;&Acirc;&nbsp; <\/p>\n\n\n\n<p>* * * deny t3 t3s<\/p>\n<\/div><\/div>\n\n\n\n<p>The connection filter rule format is as follows: target localAddress localPort action protocols, where:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>target specifies one or more servers to filter.<\/li>\n\n\n\n<li>localAddress can be used to define the host address of the server. (If an asterisk (*) is specified, the returned match will be all local IP addresses.)<\/li>\n\n\n\n<li>localPort defines the port on which the server is listening. (If an asterisk is specified, the match will return all available ports on the server).<\/li>\n\n\n\n<li>action specifies the operation to be performed. (Value must be &#8220;allow&#8221; or &#8220;deny&#8221;.)<\/li>\n\n\n\n<li>Protocols is a list of protocol names to be matched. (Must specify one of the following protocols: http, https, t3, t3s, giop, giops, dcom or ftp. If no protocol is defined, all protocols will match one rule.<\/li>\n<\/ul>\n\n\n\n<p>3. If the rule does not take effect after saving, it is recommended to restart the WebLogic service (restarting the WebLogic service will cause business interruption. It is recommended that relevant personnel assess the risk before proceeding).<\/p>\n\n\n\n<p>Taking the Windows environment as an example, the steps to restart the service are as follows:<\/p>\n\n\n\n<p>Enter the bin directory under the directory where the domain is located, run stopWebLogic.cmd file in Windows system to terminate WebLogic service, and run stopWebLogic.sh file in Linux system.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418c.jpg\"><img decoding=\"async\" width=\"377\" height=\"317\" src=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418c.jpg\" alt=\"Red circular no entry sign with a white horizontal bar.\" class=\"wp-image-28778\" srcset=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418c.jpg 377w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418c-300x252.jpg 300w, https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/04\/0418c-200x168.jpg 200w\" sizes=\"(max-width: 377px) 100vw, 377px\" \/><\/a><\/figure>\n\n\n\n<p>After the termination script is executed, run the startWebLogic.cmd or startWebLogic.sh file to start WebLogic to restart the WebLogic service.<\/p>\n\n\n\n<p><strong>Disable IIOP Protocol<\/strong><\/p>\n\n\n\n<p>Users can block attacks that exploit IIOP protocol vulnerabilities by disabling the IIOP protocol as follows:<\/p>\n\n\n\n<p>In the WebLogic console, choose Service &gt; AdminServer &gt; Protocol and uncheck Enable IIOP.<\/p>\n\n\n\n<p>Restart the WebLogic project to make the configuration take effect.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Statement<\/h2>\n\n\n\n<p>This advisory is only used to describe a potential risk. NSFOCUS does not provide any commitment or promise on this advisory. NSFOCUS and the author will not bear any liability for any direct and\/or indirect consequences and losses caused by transmitting and\/or using this advisory. NSFOCUS reserves all the rights to modify and interpret this advisory. Please include this statement paragraph when reproducing or transferring this advisory. Do not modify this advisory, add\/delete any information to\/from it, or use this advisory for commercial purposes without permission from NSFOCUS.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">About NSFOCUS<\/h2>\n\n\n\n<p>NSFOCUS, a pioneering leader in cybersecurity, is dedicated to safeguarding telecommunications, Internet service providers, hosting providers, and enterprises from sophisticated cyberattacks.<\/p>\n\n\n\n<p>Founded in 2000, NSFOCUS operates globally with over 4000 employees at two headquarters in Beijing, China, and Santa Clara, CA, USA, and over 50 offices worldwide. It has a proven track record of protecting over 25% of the Fortune Global 500 companies, including four of the five largest banks and six of the world&acirc;&euro;&trade;s top ten telecommunications companies.<\/p>\n\n\n\n<p>Leveraging technical prowess and innovation, NSFOCUS delivers a comprehensive suite of security solutions, including the Intelligent Security Operations Platform (ISOP) for modern SOC, DDoS Protection, Continuous Threat Exposure Management (CTEM) Service and Web Application and API Protection (WAAP). All the solutions and services are augmented by the Security Large Language Model (SecLLM), ML, patented algorithms and other cutting-edge research achievements developed by NSFOCUS.<\/p>\n<\/body><\/html>\n","protected":false},"excerpt":{"rendered":"<p>Overview Recently, NSFOCUS CERT detected that Oracle has released a security announcement and fixed two information disclosure vulnerabilities (CVE-2024-21006\/CVE-2024-21007) in Oracle WebLogic Server. Due to the defects of T3\/IIOP protocol, unauthenticated attackers can send malicious requests through servers affected by T3\/IIOP protocol. Access to sensitive information on the target system. Affected users should take measures [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":10365,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","footnotes":""},"categories":[3,6],"tags":[302,303,461,742],"class_list":["post-28772","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-emergency-response","tag-cve-2024-21006","tag-cve-2024-21007","tag-information-disclosure-vulnerability","tag-weblogic"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>WebLogic T3\/IIOP Information Disclosure Vulnerability (CVE-2024-21006\/CVE-2024-21007) - NSFOCUS<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"WebLogic T3\/IIOP Information Disclosure Vulnerability (CVE-2024-21006\/CVE-2024-21007) - NSFOCUS\" \/>\n<meta property=\"og:description\" content=\"Overview Recently, NSFOCUS CERT detected that Oracle has released a security announcement and fixed two information disclosure vulnerabilities\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/\" \/>\n<meta property=\"og:site_name\" content=\"NSFOCUS\" \/>\n<meta property=\"article:published_time\" content=\"2024-04-18T07:57:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-17T18:07:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/04\/oracle-weblogic.jpg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"WebLogic T3\/IIOP Information Disclosure Vulnerability (CVE-2024-21006\/CVE-2024-21007) - NSFOCUS\" \/>\n<meta name=\"twitter:description\" content=\"Overview Recently, NSFOCUS CERT detected that Oracle has released a security announcement and fixed two information disclosure vulnerabilities\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/04\/oracle-weblogic.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/person\\\/fd9ab61c9c77a81bbd870f725cc0c61d\"},\"headline\":\"WebLogic T3\\\/IIOP Information Disclosure Vulnerability (CVE-2024-21006\\\/CVE-2024-21007)\",\"datePublished\":\"2024-04-18T07:57:30+00:00\",\"dateModified\":\"2026-04-17T18:07:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\\\/\"},\"wordCount\":1001,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/oracle-weblogic.jpg\",\"keywords\":[\"CVE-2024-21006\",\"CVE-2024-21007\",\"Information Disclosure Vulnerability\",\"WebLogic\"],\"articleSection\":[\"Blog\",\"Emergency Response\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\\\/\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\\\/\",\"name\":\"WebLogic T3\\\/IIOP Information Disclosure Vulnerability (CVE-2024-21006\\\/CVE-2024-21007) - NSFOCUS\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/oracle-weblogic.jpg\",\"datePublished\":\"2024-04-18T07:57:30+00:00\",\"dateModified\":\"2026-04-17T18:07:38+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\\\/#primaryimage\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/oracle-weblogic.jpg\",\"contentUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/oracle-weblogic.jpg\",\"width\":544,\"height\":285,\"caption\":\"Oracle WebLogic Server logo.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/nsfocusglobal.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"WebLogic T3\\\/IIOP Information Disclosure Vulnerability (CVE-2024-21006\\\/CVE-2024-21007)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#website\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/\",\"name\":\"NSFOCUS\",\"description\":\"Security Made Smart and Simple\",\"publisher\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\",\"name\":\"NSFOCUS\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/logo-ns.png\",\"contentUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/logo-ns.png\",\"width\":248,\"height\":36,\"caption\":\"NSFOCUS\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/person\\\/fd9ab61c9c77a81bbd870f725cc0c61d\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/nsfocusglobal.com\"],\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"WebLogic T3\/IIOP Information Disclosure Vulnerability (CVE-2024-21006\/CVE-2024-21007) - NSFOCUS","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"pt_BR","og_type":"article","og_title":"WebLogic T3\/IIOP Information Disclosure Vulnerability (CVE-2024-21006\/CVE-2024-21007) - NSFOCUS","og_description":"Overview Recently, NSFOCUS CERT detected that Oracle has released a security announcement and fixed two information disclosure vulnerabilities","og_url":"https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/","og_site_name":"NSFOCUS","article_published_time":"2024-04-18T07:57:30+00:00","article_modified_time":"2026-04-17T18:07:38+00:00","og_image":[{"url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/04\/oracle-weblogic.jpg","type":"","width":"","height":""}],"author":"admin","twitter_card":"summary_large_image","twitter_title":"WebLogic T3\/IIOP Information Disclosure Vulnerability (CVE-2024-21006\/CVE-2024-21007) - NSFOCUS","twitter_description":"Overview Recently, NSFOCUS CERT detected that Oracle has released a security announcement and fixed two information disclosure vulnerabilities","twitter_image":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/04\/oracle-weblogic.jpg","twitter_misc":{"Escrito por":"admin","Est. tempo de leitura":"5 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/#article","isPartOf":{"@id":"https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/"},"author":{"name":"admin","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/person\/fd9ab61c9c77a81bbd870f725cc0c61d"},"headline":"WebLogic T3\/IIOP Information Disclosure Vulnerability (CVE-2024-21006\/CVE-2024-21007)","datePublished":"2024-04-18T07:57:30+00:00","dateModified":"2026-04-17T18:07:38+00:00","mainEntityOfPage":{"@id":"https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/"},"wordCount":1001,"commentCount":0,"publisher":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization"},"image":{"@id":"https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/#primaryimage"},"thumbnailUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/04\/oracle-weblogic.jpg","keywords":["CVE-2024-21006","CVE-2024-21007","Information Disclosure Vulnerability","WebLogic"],"articleSection":["Blog","Emergency Response"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/","url":"https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/","name":"WebLogic T3\/IIOP Information Disclosure Vulnerability (CVE-2024-21006\/CVE-2024-21007) - NSFOCUS","isPartOf":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/#primaryimage"},"image":{"@id":"https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/#primaryimage"},"thumbnailUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/04\/oracle-weblogic.jpg","datePublished":"2024-04-18T07:57:30+00:00","dateModified":"2026-04-17T18:07:38+00:00","breadcrumb":{"@id":"https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/#primaryimage","url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/04\/oracle-weblogic.jpg","contentUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2020\/04\/oracle-weblogic.jpg","width":544,"height":285,"caption":"Oracle WebLogic Server logo."},{"@type":"BreadcrumbList","@id":"https:\/\/nsfocusglobal.com\/weblogic-t3-iiop-information-disclosure-vulnerability-cve-2024-21006-cve-2024-21007\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nsfocusglobal.com\/"},{"@type":"ListItem","position":2,"name":"WebLogic T3\/IIOP Information Disclosure Vulnerability (CVE-2024-21006\/CVE-2024-21007)"}]},{"@type":"WebSite","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#website","url":"https:\/\/nsfocusglobal.com\/pt-br\/","name":"NSFOCUS","description":"Security Made Smart and Simple","publisher":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nsfocusglobal.com\/pt-br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization","name":"NSFOCUS","url":"https:\/\/nsfocusglobal.com\/pt-br\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/logo\/image\/","url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/08\/logo-ns.png","contentUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/08\/logo-ns.png","width":248,"height":36,"caption":"NSFOCUS"},"image":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/person\/fd9ab61c9c77a81bbd870f725cc0c61d","name":"admin","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/nsfocusglobal.com"],"url":"https:\/\/nsfocusglobal.com\/pt-br\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts\/28772","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/comments?post=28772"}],"version-history":[{"count":0,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts\/28772\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/media\/10365"}],"wp:attachment":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/media?parent=28772"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/categories?post=28772"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/tags?post=28772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}