WebLogic Application Vulnerability Irule

Hi Team,

 

We are using the below irule against a weblogic server application:

 

Irule for blocking weblogic urls to hosts.

when HTTP_REQUEST { set uri [HTTP::uri] set host [HTTP::host] log local0. "Uri is [HTTP::uri]" if { $uri eq "/console" } { HTTP::redirect "http://$host" return

 

log local0. "matched URI [HTTP::uri]"

} elseif {[matchclass $uri contains $::wl_admin_paths]} { HTTP::redirect "http://$host" return }

 

}

 

where wl_admin_paths is a String Data-Group which is consisting of the below:

 

/Author /login.workflow:Enter /seapibroker /sehelp :Admin :SiteStatus seutil.workflow:workflowTester

 

So, will this Irule is basically blocking the URI contents which are mapped there ? Kindly guide, not understanding this script much.

 

Thanks and Regards Parveez