Shulou(Shulou.com)05/31 Report--

This article focuses on "how to upgrade the patch for Oracle Weblogic deserialization vulnerability". Interested friends may wish to take a look. The method introduced in this paper is simple, fast and practical. Let's let the editor learn how to upgrade the patch for Oracle Weblogic deserialization vulnerability.

For version 10.3.6.0, you need to execute a bsh.sh script to install the patch

1. First download the patch pack 27919965_1036_Generic.zip

two。 Upload the patch pack 27919965_1036_Generic.zip to {MW_HOME} / utils/bsu/cache_dir, where MW_HOME is the BASE directory of Weblogic, similar to the Oracle BASE directory

3. Extract the patch pack 27919965_1036_Generic.zip

[root@app1 cache_dir] # unzip p27919965_1036_Generic.zipArchive: p27919965_1036_Generic.zip extracting: B47X.jar inflating: patch-catalog_26112.xml inflating: README.txt

4. Execute the installation command (bsu.sh-install-patch_download_dir= {MW_HOME} / utils/bsu/cache_dir-patchlist= {PATCH_ID}-prod_dir= {MW_HOME} / {WL_HOME}) where WL_HOME is the WebLogic home directory

Root@app1 bsu] #. / bsu.sh-install-patch_download_dir=/wls11g/utils/bsu/cache_dir-patchlist=B47X-prod_dir=/wls11g/wlserver_10.3Checking for conflicts.No conflict (s) detectedInstalling Patch ID: B47X..Result: Success

5. Check whether the patch pack is installed successfully

[root@app1 bsu] #. / bsu.sh-prod_dir=/wls11g/wlserver_10.3-status=applied-verbose-view ProductName: WebLogic ServerProductVersion: 10.3 MP6Components: WebLogic Server/Core Application Server,WebLogic Server/Admi nistration Console,WebLogic Server/Configuration Wizard and Upgrade Framework,WebLogic Server/Web 2.0 HTTP Pub-Sub Server,WebLogic Server/WebLogic SCA WebLogic Server/WebLogic JDBC Drivers,WebLogic Server/Third Party JDBC Drivers,WebLogic Server/WebLogic Server Clients,WebLogic Server/WebLogic Web Server Plugins,WebLogic Server/UDDI and Xquery Support,WebLog ic Server/Evaluation Database WebLogic Server/Workshop Code Completion SupportBEAHome: / wls11gProductHome: / wls11g/wlserver_10.3PatchSystemDir: / wls11g/utils/bsuPatchDir: / wls11g/patch_wls1036Profile: DefaultDownloadDir: / wls11g/utils/bsu/cache_dirJavaVersion: 1.6.0_29JavaVendor: SunPatch ID: B47XPatchContainer: B47X.jarChecksum:-345780037Severity : optionalCategory: GeneralCR/BUG: 27919965Restart: trueDescription: WLS PATCH SET UPDATE 10.3.6.0.180717WLS PATCH SET UPDATE 10.3.6.0.180717

6. Restart WebLogic

[root@app1 bsu] # service weblogic restartStopping weblogic: weblogic is not running.Starting weblogic: [root@app1 bsu] # .Java Memory arguments:-Xms4096m-Xmx4096m-XX:MaxPermSize=1024m.WLS Start Mode=Production.CLASSPATH=/wls11g/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/wls11g/patch_ocp371/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0 .x86 _ 64/lib/tools.jar:/wls11g/wlserver_10.3/server/lib/weblogic_sp.jar:/wls11g/wlserver_10.3/server/lib/weblogic.jar:/wls11g/modules/features/weblogic.server.modules_10.3.6.0.jar:/wls11g/wlserver_10.3/server/lib/webservices.jar:/wls11g/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/wls11g/modules/net.sf .antcontrib _ 1.1.0.031-0b2/lib/ant-contrib.jar:/wls11g/wlserver_10.3/common/derby/lib/derbyclient.jar:/wls11g/wlserver_10.3/server/lib/xqrl.jar:.:/weblogic11_64/jdk1.6.0_20/lib/dt.jar:/weblogic11_64/jdk1.6.0_20/lib/tools.jar.PATH=/wls11g/wlserver_10.3/server/bin:/wls11g/modules/org. Apache.ant_1.7.1/bin:/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/bin:/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/bin:/weblogic11_64/jdk1.6.0_20/bin:/usr/lib64/qt-3.3/bin:/usr/kerberos/sbin:/usr/kerberos/bin:/usr / local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin.*** To start WebLogic Server Use a username and * * password assigned to an admin-level user. For * * server administration, use the WebLogic Server * * console at http://hostname:port/console * starting weblogic with Java version:java version "1.6.0" OpenJDK Runtime Environment (build 1.6.0-b09) OpenJDK 64-Bit Server VM (build 1.6.0-b09 Mixed mode) Starting WLS with line:/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/bin/java-server-Xms4096m-Xmx4096m-XX:MaxPermSize=1024m-Dweblogic.Name=AdminServer-Djava.security.policy=/wls11g/wlserver_10.3/server/lib/weblogic.policy-Dweblogic.ProductionModeEnabled=true-da-Dplatform.home=/wls11g/wlserver_10.3-Dwls.home=/wls11g/wlserver_10.3/server-Dweblogic.home=/wls11g/wlserver _ 10.3/server-Dweblogic.management.discover=true-Dwlw.iterativeDev=false-Dwlw.testConsole=false-Dwlw.logErrorsToConsole=false-Dweblogic.ext.dirs=/wls11g/patch_wls1036/profiles/default/sysext_manifest_classpath:/wls11g/patch_ocp371/profiles/default/sysext_manifest_classpath-Dplatform.home=/wls11g/wlserver_10.3-Dwls.home=/wls11g/wlserver_10.3/server-Dweblogic.home=/wls11g/wlserver_10.3/server-Dweblogic.management.discover=true-verbose:gc-XX: + PrintGCTimeStamps-XX:+HeapDumpOnOutOfMemoryError-XX:+PrintGCDetails-XX:+PrintGC-Xloggc:gc.log-Dwlw.iterativeDev=false-Dwlw.testConsole=false-Dwlw.logErrorsToConsole=false weblogic.Server

After executing the restart command, weblogic automatically terminates and does not generate any logs or error messages, if I choose to delete the patch

7. Delete patch

Root@app1 bsu] #. / bsu.sh-remove-patchlist=B47X-prod_dir=/wls11g/wlserver_10.3Checking for conflicts.No conflict (s) detectedRemoving Patch ID: B47X..Result: Success

8. Restart WebLogic and return to normal

[root@app1 bsu] # service weblogic restartStopping weblogic: weblogic is not running.Starting weblogic: [root@app1 bsu] #.. JAVA Memory arguments:-Xms4096m-Xmx4096m-XX:MaxPermSize=256m.WLS Start Mode=Production.CLASSPATH=/wls11g/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/wls11g/patch_ocp371/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/usr/lib/jvm/java-1.6.0-openjdk-1.6.0. 0.x86_64/lib/tools.jar:/wls11g/wlserver_10.3/server/lib/weblogic_sp.jar:/wls11g/wlserver_10.3/server/lib/weblogic.jar:/wls11g/modules/features/weblogic.server.modules_10.3.6.0.jar:/wls11g/wlserver_10.3/server/lib/webservices.jar:/wls11g/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/wls11g/modules/net. Sf.antcontrib_1.1.0.0_1-0b2According to wls11g stop wlserverbelt 10.3 Commonbank derbyByByByclient.jarVere Razor Wls11g stop wlserverblade 10.3pat Lexrl.jar.PATHarms Universe wls11gUnig Universe 10.3 serverstop 10.3 server ls11gstop binverandls11gmodulesamorg.apache.antcards 1.7.1angle binomorg.apache.antcards 1.7.1angle binmonmonmonditionusrandlibjvmand javahands 1.6.0openjdkcolor 1.6.0.x86i 64ZZX jremax binrplash, usrplash, JVM, JVM, javaMel, 1.6.0, Muhammad, openjdkmi, 1.6.0.x86, 64, binr, bind, bind, bind. Use a username and * * password assigned to an admin-level user. For * * server administration, use the WebLogic Server * * console at http://hostname:port/console * starting weblogic with Java version:java version "1.6.0" OpenJDK Runtime Environment (build 1.6.0-b09) OpenJDK 64-Bit Server VM (build 1.6.0-b09 Mixed mode) Starting WLS with line:/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/bin/java-server-Xms4096m-Xmx4096m-XX:MaxPermSize=256m-Dweblogic.Name=AdminServer-Djava.security.policy=/wls11g/wlserver_10.3/server/lib/weblogic.policy-Dweblogic.ProductionModeEnabled=true-da-Dplatform.home=/wls11g/wlserver_10.3-Dwls.home=/wls11g/wlserver_10.3/server-Dweblogic.home=/wls11g/wlserver _ 10.3/server-Dweblogic.management.discover=true-Dwlw.iterativeDev=false-Dwlw.testConsole=false-Dwlw.logErrorsToConsole=false-Dweblogic.ext.dirs=/wls11g/patch_wls1036/profiles/default/sysext_manifest_classpath:/wls11g/patch_ocp371/profiles/default/sysext_manifest_classpath-Dplatform.home=/wls11g/wlserver_10.3-Dwls.home=/wls11g/wlserver_10.3/server-Dweblogic.home=/wls11g/wlserver_10.3/server-Dweblogic.management.discover=true-verbose:gc-XX: + PrintGCTimeStamps-XX:+HeapDumpOnOutOfMemoryError-XX:+PrintGCDetails-XX:+PrintGC-Xloggc:gc.log-Dwlw.iterativeDev=false-Dwlw.testConsole=false-Dwlw.logErrorsToConsole=false weblogic.Server

9. Because weblogic could not be started normally after installing the patch, I chose to disable the T3 protocol.

After logging in to the console, select the Security tab page on the bash_domain configuration page, click filter, and set the following rules in the connection filter rules

127.0.0.1 * * allow T3 t3s0.0.0.0/0 * * deny T3 T3s

10. Then restart weblogic

[root@app1 bsu] # service weblogic restartStopping weblogic: weblogic is not running.Starting weblogic: [root@app1 bsu] #.. JAVA Memory arguments:-Xms4096m-Xmx4096m-XX:MaxPermSize=256m.WLS Start Mode=Production.CLASSPATH=/wls11g/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/wls11g/patch_ocp371/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/usr/lib/jvm/java-1.6.0-openjdk-1.6.0. 0.x86_64/lib/tools.jar:/wls11g/wlserver_10.3/server/lib/weblogic_sp.jar:/wls11g/wlserver_10.3/server/lib/weblogic.jar:/wls11g/modules/features/weblogic.server.modules_10.3.6.0.jar:/wls11g/wlserver_10.3/server/lib/webservices.jar:/wls11g/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/wls11g/modules/net. Sf.antcontrib_1.1.0.0_1-0b2According to wls11g stop wlserverbelt 10.3 Commonbank derbyByByByclient.jarVere Razor Wls11g stop wlserverblade 10.3pat Lexrl.jar.PATHarms Universe wls11gUnig Universe 10.3 serverstop 10.3 server ls11gstop binverandls11gmodulesamorg.apache.antcards 1.7.1angle binomorg.apache.antcards 1.7.1angle binmonmonmonditionusrandlibjvmand javahands 1.6.0openjdkcolor 1.6.0.x86i 64ZZX jremax binrplash, usrplash, JVM, JVM, javaMel, 1.6.0, Muhammad, openjdkmi, 1.6.0.x86, 64, binr, bind, bind, bind. Use a username and * * password assigned to an admin-level user. For * * server administration, use the WebLogic Server * * console at http://hostname:port/console * starting weblogic with Java version:java version "1.6.0" OpenJDK Runtime Environment (build 1.6.0-b09) OpenJDK 64-Bit Server VM (build 1.6.0-b09 Mixed mode) Starting WLS with line:/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/bin/java-server-Xms4096m-Xmx4096m-XX:MaxPermSize=256m-Dweblogic.Name=AdminServer-Djava.security.policy=/wls11g/wlserver_10.3/server/lib/weblogic.policy-Dweblogic.ProductionModeEnabled=true-da-Dplatform.home=/wls11g/wlserver_10.3-Dwls.home=/wls11g/wlserver_10.3/server-Dweblogic.home=/wls11g/wlserver _ 10.3/server-Dweblogic.management.discover=true-Dwlw.iterativeDev=false-Dwlw.testConsole=false-Dwlw.logErrorsToConsole=false-Dweblogic.ext.dirs=/wls11g/patch_wls1036/profiles/default/sysext_manifest_classpath:/wls11g/patch_ocp371/profiles/default/sysext_manifest_classpath-Dplatform.home=/wls11g/wlserver_10.3-Dwls.home=/wls11g/wlserver_10.3/server-Dweblogic.home=/wls11g/wlserver_10.3/server-Dweblogic.management.discover=true-verbose:gc-XX: + PrintGCTimeStamps-XX:+HeapDumpOnOutOfMemoryError-XX:+PrintGCDetails-XX:+PrintGC-Xloggc:gc.log-Dwlw.iterativeDev=false-Dwlw.testConsole=false-Dwlw.logErrorsToConsole=false weblogic.Server

Use OPatch for patch installation for version 12.1.3.0

1. Upload the latest OPatch tool to the server where WebLogic is located and extract it

[root@ldjc wls12c] # unzip p6880880_132000_Generic.zipArchive: p6880880_132000_Generic.zipreplace OPatch/ocm/lib/emocmutl.jar? [y] es, [n] o, [A] ll, [N] one, [r] ename: y inflating: OPatch/ocm/lib/emocmutl.jar replace OPatch/ocm/doc/dummy.txt? [y] es, [n] o, [A] ll, [N] one [r] ename: An extracting: OPatch/ocm/doc/dummy.txt extracting: OPatch/ocm/bin/dummy inflating: OPatch/ocm/ocm_platforms.txt extracting: OPatch/ocm/generic.zip inflating: OPatch/oplan/README.html inflating: OPatch/oplan/oplan inflating: OPatch/oplan/README.txt inflating: OPatch/oplan/jlib/EMrepoDrivers.jar inflating: OPatch/oplan/jlib/automation.jar inflating: OPatch/oplan/jlib/Validation.jar inflating: OPatch/oplan/jlib/apache-commons/commons-cli-1.0.jar inflating: OPatch/oplan/jlib/CRSProductDriver.jar inflating: OPatch/oplan/jlib/OsysModel.jar inflating: OPatch/oplan/jlib/oplan.jar inflating: OPatch/oplan/jlib/jaxb/activation.jar inflating: OPatch/oplan/jlib/jaxb/jaxb-api.jar inflating: OPatch/oplan/jlib/jaxb/jaxb-impl.jar inflating: OPatch/oplan/jlib/jaxb/jsr173_1.0_api. Jar inflating: OPatch/oplan/jlib/ValidationRules.jar inflating: OPatch/oplan/jlib/patchsdk.jar inflating: OPatch/oplan/jlib/osysmodel-utils.jar inflating: OPatch/oplan/jlib/oracle.oplan.classpath.jar inflating: OPatch/operr.bat inflating: OPatch/opatchprereqs/oui/knowledgesrc.xml creating: OPatch/opatchprereqs/opatch/ inflating: OPatch/opatchprereqs/opatch/opatch_prereq.xml inflating: OPatch/opatchprereqs/opatch/rulemap.xml inflating: OPatch/opatchprereqs / opatch/runtime_prereq.xml inflating: OPatch/opatchprereqs/opatch_prereq.sh inflating: OPatch/opatchprereqs/prerequisite.properties inflating: OPatch/opatch inflating: OPatch/emdpatch.pl inflating: OPatch/version.txt inflating: OPatch/opatch.ini inflating: OPatch/operr inflating: OPatch/README.txt inflating: OPatch/opatch.pl inflating: OPatch/scripts/opatch_wls.bat inflating: OPatch/scripts/opatch_jvm_discovery.bat inflating: OPatch/scripts/opatch_wls inflating: OPatch/scripts/opatch_jvm_discovery inflating: OPatch/docs/operr_readme.txt inflating: OPatch/docs/README.txt inflating: OPatch/jlib/oracle.opatch.classpath.windows.jar inflating: OPatch/jlib/opatchsdk.jar inflating: OPatch/jlib/oracle.opatch.classpath.unix.jar inflating: OPatch/jlib/opatch.jar inflating: OPatch/jlib/oracle.opatch.classpath. Jar inflating: OPatch/opatch.bat [root@ldjc wls12c] # chown-R xxxx:xxxx / wls12c/OPatch

two。 Upload the patch pack to unzip p27919943_121300_Generic.zip to the server where WebLogic is located and extract it

[root@ldjc soft] # unzip p27919943_121300_Generic.zipArchive: p27919943_121300_Generic.zip creating: 27919943/ creating: 27919943/etc/ creating: 27919943/etc/config/ inflating: 27919943/etc/config/actions.xml inflating: 27919943/etc/config/inventory.xml creating: 27919943/files/ creating: 27919943/files/inventory/ creating: 27919943/files/inventory/Components/ creating: 27919943/files/inventory/Components/oracle.css.mod/ creating: 27919943/files / inventory/Components/oracle.css.mod/12.1.3.0.0/ creating: 27919943/files/inventory/Components/oracle.css.mod/12.1.3.0.0/patches/ creating: 27919943/files/inventory/Components/oracle.css.mod/12.1.3.0.0/patches/22153233/ inflating: 27919943/files/inventory/Components/oracle.css.mod/12.1.3.0.0/patches/22153233/compDef.xml creating: 27919943 / files/inventory/Components/oracle.fmwconfig.common.shared/... Omit.

3. Install the patch

[weblogic@ldjc OPatch] $. / opatch apply / soft/27919943/Oracle Interim Patch Installer version 13.2.0.0.0Copyright (c) 2014, Oracle Corporation. All rights reserved.Oracle Home: / wls12cCentral Inventory: / home/weblogic/oraInventory from: / wls12c/oraInst.locOPatch version: 13.2.0.0.0OUI version: 13.2.0.0.0Log file location: / wls12c/cfgtoollogs/opatch/27919943_Jul_20_2018_06_54_37/apply2018-07-20 December 06-54-29AM_1.logOPatch detects the Middleware Home as "/ wls12c" Jul 20 2018 6:54:41 AM oracle.sysman.oii.oiii.OiiiInstallAreaControl initAreaControlINFO: Install area Control created with access level 0Applying interim patch '27919943' to OH' / wls12c'Verifying environment and performing prerequisite checks...Interim patch 27919943 is a superset of the patch (es) [22250567 21370953] in the Oracle HomeOPatch will roll back the subset patches and apply the given patch.All checks passed.Please shutdown Oracle instances running out of this ORACLE_HOME on the local system. (Oracle Home ='/ wls12c') Is the local system ready for patching? [y | n] yUser Responded with: YBacking up files...Rolling back interim patch '22250567' from OH' / wls12c'Patching component oracle.wls.libraries, 12.1.3.0.0...Patching component oracle.wls.libraries, 12.1.3.0.0...Patching component oracle.wls.clients, 12.1.3.0.0...Patching component oracle.wls.clients 12.1.3.0.0...RollbackSession removing interim patch '22250567' from inventoryRolling back interim patch' 21370953 'from OH' / wls12c'Patching component oracle.wls.libraries, 12.1.3.0.0...Patching component oracle.wls.libraries, 12.1.3.0.0...Patching component oracle.wls.clients, 12.1.3.0.0...Patching component oracle.wls.clients, 12.1.3.0.0...Patching component oracle.wls.core.app.server 12.1.3.0.0...Patching component oracle.wls.core.app.server, 12.1.3.0.0...Patching component oracle.wls.libraries.mod, 12.1.3.0.0...Patching component oracle.wls.libraries.mod, 12.1.3.0.0...Patching component oracle.webservices.wls, 12.1.3.0.0...Patching component oracle.webservices.wls 12.1.3.0.0...Patching component oracle.wls.server.shared.with.core.engine, 12.1.3.0.0...Patching component oracle.wls.server.shared.with.core.engine, 12.1.3.0.0...Patching component oracle.wls.workshop.code.completion.support, 12.1.3.0.0...Patching component oracle.wls.workshop.code.completion.support, 12.1.3.0.0...Patching component oracle.wls.admin.console.en 12.1.3.0.0...Patching component oracle.wls.admin.console.en, 12.1.3.0.0...RollbackSession removing interim patch '21370953' from inventoryOPatch back to application of the patch' 27919943' after auto-rollback.Patching component oracle.wls.workshop.code.completion.support, 12.1.3.0.0...Patching component oracle.wls.workshop.code.completion.support, 12.1.3.0.0...Patching component oracle.css.mod 12.1.3.0.0...Patching component oracle.css.mod, 12.1.3.0.0...Patching component oracle.fmwconfig.common.shared, 12.1.3.0.0...Patching component oracle.fmwconfig.common.shared, 12.1.3.0.0...Patching component oracle.wls.common.nodemanager, 12.1.3.0.0...Patching component oracle.wls.common.nodemanager 12.1.3.0.0...Patching component oracle.wls.server.shared.with.core.engine, 12.1.3.0.0...Patching component oracle.wls.server.shared.with.core.engine, 12.1.3.0.0...Patching component oracle.webservices.base, 12.1.3.0.0...Patching component oracle.webservices.base, 12.1.3.0.0...Patching component oracle.wls.shared.with.cam 12.1.3.0.0...Patching component oracle.wls.shared.with.cam, 12.1.3.0.0...Patching component oracle.webservices.orawsdl, 12.1.3.0.0...Patching component oracle.webservices.orawsdl, 12.1.3.0.0...Patching component oracle.wls.libraries.mod, 12.1.3.0.0...Patching component oracle.wls.libraries.mod, 12.1.3.0.0...Patching component oracle.wls.admin.console.en 12.1.3.0.0...Patching component oracle.wls.admin.console.en, 12.1.3.0.0...Patching component oracle.wls.core.app.server, 12.1.3.0.0...Patching component oracle.wls.core.app.server, 12.1.3.0.0...Patching component oracle.webservices.wls, 12.1.3.0.0...Patching component oracle.webservices.wls, 12.1.3.0.0...Patching component oracle.wls.clients 12.1.3.0.0...Patching component oracle.wls.clients, 12.1.3.0.0...Patching component oracle.wls.wlsportable.mod, 12.1.3.0.0...Patching component oracle.wls.wlsportable.mod, 12.1.3.0.0...Patching component oracle.fmwconfig.common.wls.shared, 12.1.3.0.0...Patching component oracle.fmwconfig.common.wls.shared, 12.1.3.0.0...Patching component oracle.wls.libraries 12.1.3.0.0...Patching component oracle.wls.libraries, 12.1.3.0.0...Verifying the update...Patch 27919943 successfully appliedLog file location: / wls12c/cfgtoollogs/opatch/27919943_Jul_20_2018_06_54_37/apply2018-07-20 06-54-29AM_1.logOPatch succeeded.

4. Check to see if the patch has been installed successfully. From the output, you can see that the patch has been installed successfully.

[weblogic@ldjc OPatch] $. / opatch lspatchesJul 20, 2018 7:00:17 AM oracle.sysman.oii.oiii.OiiiInstallAreaControl initAreaControlINFO: Install area Control created with access level 027919943 AM oracle.sysman.oii.oiii.OiiiInstallAreaControl initAreaControlINFO 12.1.3.0.18071720741228 12.1.3.1 BP1OPatch succeeded.

5. Restart weblogic

[root@ldjc base_domain] # service weblogic restartStopping weblogic: Starting weblogic: .Java Memory arguments:-Xms256m-Xmx512m-XX:CompileThreshold=8000-XX:PermSize=128m-XX:MaxPermSize=256m.CLASSPATH=/opt/jdk1.7.0_75/lib/tools.jar:/wls12c/wlserver/server/lib/weblogic_sp.jar:/wls12c/wlserver/server/lib/weblogic.jar:/wls12c/wlserver/../oracle_common/modules/net.sf.antcontrib_1.1.0.0_1-0b3/ Lib/ant-contrib.jar:/wls12c/wlserver/modules/features/oracle.wls.common.nodemanager_2.0.0.0.jar:/wls12c/wlserver/../oracle_common/modules/com.oracle.cie.config-wls-online_8.1.0.0.jar:/wls12c/wlserver/common/derby/lib/derbyclient.jar:/wls12c/wlserver/common/derby/lib/derby.jar:/wls12c/wlserver/server/lib/xqrl.jar.PATH=/wls12c/wlserver/ Server/bin:/wls12c/wlserver/../oracle_common/modules/org.apache.ant_1.9.2/bin:/opt/jdk1.7.0_75/jre/bin:/opt/jdk1.7.0_75/bin:/sbin:/usr/sbin:/bin:/usr/bin.**** * To start WebLogic Server Use a username and * * password assigned to an admin-level user. For * * server administration Use the WebLogic Server * * console at http://hostname:port/console * * starting weblogic with Java version:java version "1.7.0mm 75" Java (TM) SE Runtime Environment (build 1.7.0_75-b13) Java HotSpot (TM) 64-Bit Server VM (build 24.75-b04 Mixed mode) Starting WLS with line:/opt/jdk1.7.0_75/bin/java-server-Xms256m-Xmx512m-XX:CompileThreshold=8000-XX:PermSize=128m-XX:MaxPermSize=256m-Dweblogic.Name=AdminServer-Djava.security.policy=/wls12c/wlserver/server/lib/weblogic.policy-Xverify:none-Djava.endorsed.dirs=/opt/jdk1.7.0_75/jre/lib/endorsed:/wls12c/wlserver/../oracle_common/modules/endorsed-da-Dwls.home=/wls12c/wlserver/server -Dweblogic.home=/wls12c/wlserver/server-Dweblogic.utils.cmm.lowertier.ServiceDisabled=true weblogic.Server so far I believe that everyone has a deeper understanding of "how to upgrade the patch for Oracle Weblogic deserialization vulnerability", so you might as well do it in practice. Here is the website, more related content can enter the relevant channels to inquire, follow us, continue to learn!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.