GetShell, a financial information technology service provider system, leaks millions of data

...

mask area

1.***.**./crmweb/

Contractor: Beijing Yu Xin Yi Cheng Technology Co., Ltd.

Beijing Yuxin Technology Co., Ltd. [NASDAQ: YTEC] is the first Chinese financial information technology service provider listed on NASDAQ in the United States and one of the largest and most influential companies in China's financial IT industry. Headquartered in Beijing, China, with more than 5,000 employees, it has established subsidiaries and offices in more than ten cities and established a nationwide service network for its customers.

The reverse sequence getshell

mask area

1.://**.**.**/bea_wls_internal/1.jsp

mima:

mask area

***** og *****

jdbc:

jdbc: oracle: thin: @ **. **. **. **: 1521: orcl

oracle.jdbc.xa.client.OracleXADataSource

user

crm_paifl

{AES} fxSS9YFM5mUwUvphKmEQtbl3hoAGBrl / kpyhgtZwWDw =

RWAT_IR_CARD_ACCOUNT_INFO11139881

CRM_V5ACRM_F_AG_AGREEMENT3404546

CRM_2016ACRM_F_AG_AGREEMENT3404546

CRMV5_LHCXACRM_F_AG_AGREEMENT3404546

JF_POC0310ACRM_F_AG_AGREEMENT3404546

CRM_PZHACRM_F_AG_AGREEMENT3404546

RWAT_ICT_CORP_CUST_INFO3217494

GJ_DATAO_ABS_DK2541927

RWAT_IC_DUEBILL_INFO2104669

RWAT_CE_W_RETA_DEBTCOLLREL_TMP1919121

RWAT_CC_RETA_DEBT_COLL_REL1691517

RWAT_CC_CORP_DEBT_COLL_REL1415373

RWAT_CE_W_CORP_DEBTCOLLREL_TMP1382416

SYSAUD $ 1365023

RWAT_CE_CUR_CORP_DEBTCOLLREL_TMP1199980

RWAT_PV_IR_CARD_ACCOUNT_INFO1193427

RWAT_PV_IR_CARD_CUST_INFO1182323

RWAT_CC_COLL_CORP_DEBT1138749

RWAT_CE_W_CORP_DEBT_TMP1091636

RWAT_CE_W_CORP_RWA_RESU1091635

RWAT_CE_W_RETA_DEBT_TMP1028357

RWAT_CE_W_RETA_RWA_RESU1028357

RWAT_CC_COLL_RETA_DEBT1028354

GJ_DATAM_SUM_RSS_INDEX970396

RWAT_CE_CUR_RETA_DEBTCOLLREL_TMP965147

CRM_BXACRM_F_CI_GRADE959167

CRMACRM_F_CI_GRADE959167

CRM_2015ACRM_F_CI_GRADE959167

RWAT_REP_RECALL_AUDIT_G4A_1935121

SYSSOURCE $ 923363

CRM_BXACRM_F_EVT_SAVE_TRAD_TANS829362

CRMACRM_F_EVT_SAVE_TRAD_TANS829362

CRM_2015ACRM_F_EVT_SAVE_TRAD_TANS829362

RWAT_CO_EXPO_RETA_RESU780025

RWAT_CE_CUR_CORP_RWA_DETA773310

RWAT_CE_CUR_CORP_DEBT_TMP748658

RWAT_CE_CUR_CORP_RWA_RESU748658

RWAT_AS_CURRENT_RWA_DETA_WIDE747483

SYSWRI $ _OPTSTAT_HISTGRM_HISTORY696036

CRMACRM_A_CI_BUSS_TRANS_MONTH640780

CRM_PAIFLACRM_F_AG_AGREEMENT614200

RWAT_CC_COLL_RETA_COLL551670

RWAT_CE_W_RETA_RWA_DETA534391

RWAT_CE_CUR_RETA_DEBT_TMP531696

RWAT_AS_ECOCAP_DETA_RES501156

RWAT_AS_CREDITCOLLECT_G4B_2495046

RWAT_AS_ECOCAP_DATA_IN483354

solution:

Update patch