{
  "port": 7002,
  "protocol": "both",
  "service": "Oracle WebLogic SSL listen / AFS Protection Server",
  "oneLiner": "WebLogic's default SSL listen port on TCP; AFS's users-and-groups database in the registration.",
  "whatItIs": "The IANA name is afs3-prserver, the AFS Protection Server that holds the cell's user and group database and hands out protection-database IDs; like the rest of AFS it speaks Rx over UDP. On TCP, Oracle's Fusion Middleware port table gives 7002 as the default SSL listen port for the WebLogic Administration Server, the TLS twin of 7001. A host with both 7001 and 7002 open is nearly always a WebLogic domain, not an AFS cell.",
  "exposure": {
    "verdict": "never",
    "note": "TLS does not change what it is — a WebLogic administration endpoint. Keep it on a management network; internet-facing WebLogic admin ports are routinely mass-exploited."
  },
  "checkCommand": "curl -kI https://TARGET:7002/console",
  "links": [
    {
      "title": "Oracle Fusion Middleware — Default Port Numbers (WebLogic SSL listen 7002)",
      "url": "https://docs.oracle.com/en/middleware/fusion-middleware/12.2.1.4/asadm/port-numbers.html",
      "kind": "official-docs"
    },
    {
      "title": "OpenAFS Administration Guide",
      "url": "https://docs.openafs.org/AdminGuide/index.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 7002",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=7002",
      "kind": "iana"
    }
  ]
}