SID 1:50168

Rule Category

SERVER-WEBAPP -- Snort has detected traffic exploiting vulnerabilities in web based applications on servers.

Alert Message

SERVER-WEBAPP Atlassian Confluence Data Center and Server directory traversal attempt

Rule Explanation

This event is generated when an Atlassian Confluence Data Center and Server path traversal and upload attempt is detected. An attacker can upload a file and use this vulnerability to place it in a web-accessible directory, so they can run the file on the server afterwards. Impact: Web Application Attack Details: Ease of Attack:

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group