General-purpose command execution in the security management system of the central soft unified terminal (Java deserialization case)

General-purpose command execution in the security management system of the central soft unified terminal (Java deserialization case)

"United Endpoint Management (UEM)", with its brand new security concept, powerful function system, and sound technical architecture, the traditional Intranet security management mode has been changed, and host monitoring and audit are perfectly unified. The system adopts an integrated terminal security protection technology, integrates the security functions of terminal software, such as virus protection monitoring, network access authentication, terminal health check, system identity authentication, asset management, patch management, operation monitoring, and leakage prevention, is a complete solution for terminal security.

In the soft unified terminal Security Management System Using Middleware: Servlet/3.0; JBossAS-6, and the system encapsulates the invoker/JMXInvokerServlet by default, using the length of the getshell, found only to the JBOSS-5.0 version, however, through Java deserialization + invoker/JMXInvokerServlet, remote command execution can be performed.

Affected sites:

**. **: 8080/

**. **: 8080/

**. **: 8080/

**. **: 8080/

**. **: 8443/

**. **: 8080/

**. **: 8443/

**. **: 8443/

**. **: 8443/

Command Execution:

Solution:

Delete Interface