Oracle Weblogic Server (MOSC)

MOSC Banner

How to prevent Weblogic version information disclose by run nmap or other commands?

According to infrastructure penetration testing, running nmap command will display the WebLogic version. There is no custom script used.

The command line used as below,

sudo nmap -Pn -n -v -sV -p 7003 «server IP» -oN output15.txt

Impact:
As a result, an attacker would be able to research known vulnerabilities and potentially find existing exploits. This would vastly reduce the time required to execute an attack, including the technical expertise required to compromise the system.

PenTester's recommendation as below:
It is recommended that the affected hosts be reconfigured to prevent informative details from being displayed in the service banners such as removing the server information entirely or concealing the version number that is displayed.

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center