Malwarehigh
Vulnerable Apache Solr, Redis, Windows servers hit with cryptominers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-12629 | Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener… | 9.8 | 92% | PoC ×2 | |
| CVE-2017-9805 | XML Deserialization RCE in Apache Struts 2 REST Plugin | 8.1 | 99% | KEVPoC | KEV |
From the original article
1 min read at helpnetsecurity.com
Vulnerable servers of all kinds are being targeted, compromised and made to mine cryptocurrencies for the attackers. SANS ISC handler Renato Marihno warns about an active campaign aimed at compromising Apache Solr servers. The campaign infected 1777 victims from February 28 to March 8.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.