virus logo Intrusion Prevention

Apache.ShardingSphere.SnakeYAML.Insecure.Deserialization

description-logoDescription

This indicates an attack attempt to exploit an Insecure Deserialization Vulnerability in Apache Software Foundation ShardingSphere.
The vulnerability is due to lack of validation of YAML inputs. A remote, authenticated attacker can exploit this vulnerability by sending a specially crafted HTTP POST request to the target server. Successful exploitation of results in arbitrary code execution with the privileges of the application.

affected-products-logoAffected Products

Apache Software Foundation ShardingSphere 4.0.0
Apache Software Foundation ShardingSphere 4.0.0-RC3

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor.
https://lists.apache.org/thread.html/r4a61a24c119bd820da6fb02100d286f8aae55c8f9b94a346b9bb27d8%40%3Cdev.shardingsphere.apache.org%3E

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2020-08-12 15.904 Default_action:pass:drop
2020-04-15 15.818
ID 48879
Created Apr 15, 2020
Updated Sep 23, 2020
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
CVE ID CVE-2020-1947
Exploit Prediction Score 0.58%
Default Action drop
Active
Affected OS Linux
Affected App Apache