Rule History

SID: 2047976 • Source: et/open

Versions (3)

Version DetailsCurrent

Rev: 1 • Sep 8, 2023, 12:00 PM

Message:

ET INFO JSCAPE MFT - Binary Management Service Default TLS Certificate

Rule:

alert tls [$HOME_NET,$HTTP_SERVERS] 10880 -> any any (msg:"ET INFO JSCAPE MFT - Binary Management Service Default TLS Certificate"; flow:established,to_client; tls.cert_subject; content:"CN=JSCAPE MFT "; fast_pattern; content:"O=JSCAPE L"; reference:url,rapid7.com/blog/post/2023/09/07/cve-2023-4528-java-deserialization-vulnerability-in-jscape-mft-fixed/; reference:url,www.jscape.com/blog/binary-management-service-patch-cve-2023-4528; classtype:not-suspicious; sid:2047976; rev:1; metadata:attack_target Web_Server, created_at 2023_09_08, deployment Perimeter, deployment Internal, performance_impact Low, confidence High, signature_severity Informational, updated_at 2023_09_08, reviewed_at 2023_09_08;)

Created:

Sep 8, 2023, 12:00 PM

Updated:

Sep 8, 2023, 12:00 PM

DB Created:

Sep 21, 2024, 3:00 AM

DB Updated:

Sep 21, 2024, 3:00 AM

Filename:

rules/emerging-info.rules