当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2016-0213944

漏洞标题：紫金保险某系统GetShell影响数百万团体/个人保单信息

相关厂商：紫金保险

漏洞作者： 路人甲

提交时间：2016-05-29 11:52

修复时间：2016-07-15 17:50

公开时间：2016-07-15 17:50

漏洞类型：系统/服务补丁不及时

危害等级：高

自评Rank：12

漏洞状态：已交由第三方合作机构(cncert国家互联网应急中心)处理

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2016-05-29： 细节已通知厂商并且等待厂商处理中
2016-05-31： 厂商已经确认，细节仅向厂商公开
2016-06-10： 细节向核心白帽子及相关领域专家公开
2016-06-20： 细节向普通白帽子公开
2016-06-30： 细节向实习白帽子公开
2016-07-15： 细节向公众公开

简要描述：

...

详细说明：



mask 区域


1.://**.**.**/claim/


反序列getshell



mask 区域


1.://**.**.**/bea_wls_internal/1.jsp


密码：

mask 区域 
*****og*****


jdbc：

<url>jdbc:oracle:thin:@**.**.**.**:1521:zjhxcs</url>
    <driver-name>oracle.jdbc.OracleDriver</driver-name>
    <properties>
      <property>
        <name>user</name>
        <value>sales</value>
      </property>
    </properties>
    <password-encrypted>{3DES}xTlUGem6cFo=</password-encrypted>


BUSINESS	PRPDCARMODELPREMIUMPLAT	334538823
BUSINESS	VSUNUSEDMARK	17724313
BUSINESS	PRPTPROFITDETAIL	10909238
BUSINESS	PRPTPROFIT	7417609
BUSINESS	PRPDCARMODELGROUP	7013910
BUSINESS	PRPTITEMKIND	4517908
BUSINESS	PRPCITEMKIND_NEW	3419761
BUSINESS	PRPTITEMKIND_NEW	3418459
BUSINESS	PRPCITEMKIND_CHG	3024383
PJBJ_JY	PJ_CLLBJDYB	2871990
PJBJ_JY_1	PJ_CLLBJDYB	2734877
PJBJ_JY	PJ_QYLBJJGXXB	2201541
PJBJ_JY_1	PJ_QYLBJJGXXB	2083808
BUSINESS	PRPTINSURED	1831896
SPZX	YUP_SOURCE_BAK	1258551
PJBJ_JY	CZ_CLBMXXB	1131993
PJBJ_JY	PJ_CZLBJDYB	1025817
PJBJ_JY_1	CZ_CLBMXXB	1021984
PJBJ_JY_1	PJ_CZLBJDYB	973875
BUSINESS	PRPCITEMKIND	877334
BUSINESS	PRPCITEMKINDORIGIN	846845
SYS	WRI$_OPTSTAT_HISTGRM_HISTORY	829123
BUSINESS	PRPDCODERISK	827761
PJBJ_JY	PJ_LJTXDYB	781342
BUSINESS	PRPDADMIN	752926
BUSINESS	PRPTMAIN	751456  
BUSINESS	PRPCPROFITDETAIL	743304
BUSINESS	PRPTITEMCAR	711852   
BUSINESS	PRPTITEMCAREXT	709981
BUSINESS	PRPTEXPENSE	675560
BUSINESS	UWNOTION	663449
PJBJ_JY_1	PJ_LJTXDYB	629837
BUSINESS	PRPJFCOMBINE	594216  
BUSINESS	PRPTINSUREDNATURE	556503
BUSINESS	PRPCPROFIT	545981
PJBJ_JY	PJ_CXLBJXXB	543378
PJBJ_JY	PJ_LJZDJGB	540390
BUSINESS	PRPCMAIN_TEMP2	516906
PJBJ_JY_1	PJ_LJZDJGB	502682
PJBJ_JY_1	PJ_CXLBJXXB	499973
BUSINESS	PRPCINSURED	472047
BUSINESS	PRPTDANGERITEM	459225
BUSINESS	PRPCITEMCAR	457498


K4.png


K5.png

漏洞证明：

BUSINESS	PRPDCARMODELPREMIUMPLAT	334538823
BUSINESS	VSUNUSEDMARK	17724313
BUSINESS	PRPTPROFITDETAIL	10909238
BUSINESS	PRPTPROFIT	7417609
BUSINESS	PRPDCARMODELGROUP	7013910
BUSINESS	PRPTITEMKIND	4517908
BUSINESS	PRPCITEMKIND_NEW	3419761
BUSINESS	PRPTITEMKIND_NEW	3418459
BUSINESS	PRPCITEMKIND_CHG	3024383
PJBJ_JY	PJ_CLLBJDYB	2871990
PJBJ_JY_1	PJ_CLLBJDYB	2734877
PJBJ_JY	PJ_QYLBJJGXXB	2201541
PJBJ_JY_1	PJ_QYLBJJGXXB	2083808
BUSINESS	PRPTINSURED	1831896
SPZX	YUP_SOURCE_BAK	1258551
PJBJ_JY	CZ_CLBMXXB	1131993
PJBJ_JY	PJ_CZLBJDYB	1025817
PJBJ_JY_1	CZ_CLBMXXB	1021984
PJBJ_JY_1	PJ_CZLBJDYB	973875
BUSINESS	PRPCITEMKIND	877334
BUSINESS	PRPCITEMKINDORIGIN	846845
SYS	WRI$_OPTSTAT_HISTGRM_HISTORY	829123
BUSINESS	PRPDCODERISK	827761
PJBJ_JY	PJ_LJTXDYB	781342
BUSINESS	PRPDADMIN	752926
BUSINESS	PRPTMAIN	751456  
BUSINESS	PRPCPROFITDETAIL	743304
BUSINESS	PRPTITEMCAR	711852   
BUSINESS	PRPTITEMCAREXT	709981
BUSINESS	PRPTEXPENSE	675560
BUSINESS	UWNOTION	663449
PJBJ_JY_1	PJ_LJTXDYB	629837
BUSINESS	PRPJFCOMBINE	594216  
BUSINESS	PRPTINSUREDNATURE	556503
BUSINESS	PRPCPROFIT	545981
PJBJ_JY	PJ_CXLBJXXB	543378
PJBJ_JY	PJ_LJZDJGB	540390
BUSINESS	PRPCMAIN_TEMP2	516906
PJBJ_JY_1	PJ_LJZDJGB	502682
PJBJ_JY_1	PJ_CXLBJXXB	499973
BUSINESS	PRPCINSURED	472047
BUSINESS	PRPTDANGERITEM	459225
BUSINESS	PRPCITEMCAR	457498


K4.png


K5.png

修复方案：

更新补丁

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

危害等级：高

漏洞Rank：11

确认时间：2016-05-31 17:45

厂商回复：

CNVD确认并复现所述情况,已经转由CNCERT向保险行业信息化主管部门通报,由其后续协调网站管理单位处置.

最新状态：

暂无

漏洞评价：

评价