Apache.Dubbo.HttpRemoteInvocation.Insecure.Deserialization

description-logoDescription

This indicates an attack attempt to exploit an Insecure Deserialization Vulnerability in Apache Software Foundation Dubbo.
This vulnerability is due to improper handling of the HTTP request messages by the Apache Dubbo application that has HTTP remoting enabled. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP POST request to the target server. Successful exploitation results in arbitrary code execution with the privileges of the application.

affected-products-logoAffected Products

Apache Software Foundation Dubbo 2.6.0 to 2.6.7
Apache Software Foundation Dubbo 2.7.0 to 2.7.4
Apache Software Foundation Dubbo all 2.5.x versions

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor.
https://github.com/apache/dubbo/releases/tag/dubbo-2.7.5

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2020-07-22 15.892 Default_action:pass:drop
2020-05-07 15.839