ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 2
Sourceet/open
CreatedJuly 16, 2018
UpdatedSeptember 16, 2020
Classificationattempted-user
alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 2"; flow:established,to_server; http.uri; content:"/fm-ws/services"; fast_pattern; endswith; http.request_body; content:"<?xml"; content:"<!DOCTYPE html PUBLIC |22|-//W3C//DTD XHTML 1.0 Transitional//EN|22|"; pcre:"/^[^>]+\x22\s*http\x3a\x2f\x2f.+\.dtd/Ri"; reference:url,exploit-db.com/exploits/45027/; reference:cve,2018-12463; classtype:attempted-user; sid:2025842; rev:3; metadata:attack_target Web_Server, created_at 2018_07_16, cve CVE_2018_12463, deployment Datacenter, signature_severity Major, updated_at 2020_09_16;)
References
Metadata
attack targetWeb_Server
created at2018_07_16
deploymentDatacenter
signature severityMajor
updated at2020_09_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!