Intrusion PreventionApache.Dubbo.Routing.Configuration.Insecure.Deserialization
Description
This indicates an attack attempt to exploit an Insecure Deserialization Vulnerability in Apache Software Foundation Dubbo.
The vulnerability is due to unsafe YAML unmarshalling. An unauthenticated, remote attacker can exploit these vulnerability by enticing an Apache Dubbo Consumer or Producer to connect to a malicious Registry. Successful exploitation can result in the execution of arbitrary code under the security context of the Dubbo server.
Affected Products
Apache Software Foundation Dubbo 2.7.0 to 2.7.9
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://lists.apache.org/thread.html/raed526465e56204030ddf374b1959478a290e7511971d7aba2e9e39b%40%3Cdev.dubbo.apache.org%3E
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 50556 |
| Created | Jul 05, 2021 |
| Updated | Jul 21, 2021 |
| Risk |
|
| CVE ID | CVE-2021-30180 |
| Exploit Prediction Score | 0.3% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | Apache |