Back to Rule

Rule History

SID: 2033749 • Source: et/open

Versions (4)

Version DetailsCurrent

Rev: 3Aug 20, 2021, 12:00 PM

ET INFO Pulse Secure VPN Version Disclosure Attempt

alert http any any -> [$HOME_NET,$HTTP_SERVERS] any (msg:"ET INFO Pulse Secure VPN Version Disclosure Attempt"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/dana-admin/misc/admin.cgi"; fast_pattern; classtype:misc-activity; sid:2033749; rev:3; metadata:affected_product Pulse_Secure, attack_target Networking_Equipment, created_at 2021_08_20, deployment Perimeter, deployment SSLDecrypt, performance_impact Low, confidence High, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2023_04_28;)

Aug 20, 2021, 12:00 PM

Apr 28, 2023, 12:00 PM

Sep 21, 2024, 3:00 AM

Sep 9, 2025, 9:34 PM

rules/emerging-info.rules