Cyber Risks · Unit 42 Palo Alto Networks

Threat Brief: Information on Critical Apache Struts Vulnerability CVE-2018-11776

Summary: On August 22, 2018, the Apache Foundation released a critical update for CVE-2018-11776, a remote code execution vulnerability in Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16, exploitable in most cases without authentication via a specially crafted URL. The flaw is not exploitable in default configurations, requiring two conditions to both be met, though proof-of-concept code is already available and Palo Alto Networks released vulnerability signature 33948 in content version 8057 on August 24, 2018.
Why it matters: A prior critical Struts vulnerability was actively attacked just three days after its security update and disclosure, and with working PoC code already public, Unit 42 expects at minimum probing of this one in the near term.

Read the original at Unit 42 Palo Alto Networks ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2018-1176 CVE-2018-11776
Related: CVE-2018-11776: Apache Struts Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021
Detecting Apache Struts 2 Namespace RCE | Qualys Cyber Risks ·
Active Exploitation of New Apache Struts Vulnerability CVE-2018-11776 Deploys Cryptocurrency Miner Cyber Risks ·