Vulnerabilitycritical

New Pro-Ocean crypto-miner targets Apache ActiveMQ, Oracle WebLogic, and Redis installs

Security Affairsby @securityaffairsJan 31, 2021 · 11:27 UTC (Jan 31, 2021)3 min read

Read at securityaffairs.com

Analyze CVE-2017-10271 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2017-10271 CVE-2016-3088

Tags: cve-2017-10271 cve-2016-3088 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2016-3088	Unauthenticated Arbitrary File Upload Leading to RCE in Apache ActiveMQ Fileserver	9.8	98%	KEVPoC	Jun 1, 2016 KEV Feb 10, 2022
CVE-2017-10271	Unauthenticated Remote Code Execution in Oracle WebLogic Server	7.5	100%	KEVRansomwarePoC ×3	Oct 19, 2017 KEV Feb 10, 2022

From the original article

3 min read at securityaffairs.com

The Rocke group is using a new piece of cryptojacking malware dubbed Pro-Ocean to target Apache ActiveMQ, Oracle WebLogic, and Redis installs. The cybercrime group Rocke is using a new piece of cryptojacking malware called Pro-Ocean to target vulnerable Apache ActiveMQ, Oracle WebLogic, and Redis intalls.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.