Vulnerabilityhigh

Hackers Exploit Atlassian Confluence Vulnerability to Deploy New 'Ljl' Backdoor

Infosecurity Magazineby Alessandro MascellinoAug 4, 2022 · 17:00 UTC (Aug 4, 2022)1 min read1 · 1 read

Read at infosecurity-magazine.com

Analyze CVE-2022-26134 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-26134 CVE-2019-2725

Tags: cve-2022-26134 cve-2019-2725 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-2725	Unauthenticated Injection in Oracle WebLogic Web Services Enables RCE	9.8	100%	KEVRansomwarePoC	Apr 26, 2019 KEV Jan 10, 2022
CVE-2022-26134	Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center	9.8	100%	KEVRansomwarePoC ×2	Jun 3, 2022 KEV Jun 2, 2022

From the original article

1 min read at infosecurity-magazine.com

Cybersecurity experts from Deepwatch spotted activity from threat actors (TA) that "highly likely" exploited a security flaw in the Atlassian Confluence server (CVE-2022-26134) to deploy a new backdoor dubbed “Ljl” against a number of unnamed organizations. Deepwatch’s Adversary Tactics and Intelligence group (ATI) described the findings in an advisory published on Tuesday.

Infosecurity Magazine

By Alessandro Mascellino · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.