SERVER-WEBAPP -- Snort has detected traffic exploiting vulnerabilities in web based applications on servers.
SERVER-WEBAPP Telerik UI cryptographic keys disclosure attempt
This rule keys on a specific URI and parameters that would indicate a request for cryptographic keys, related to brute force attempts to exploit 2017-9248
This rule alerts on a brute force attempt to find the right cryptographic key
Attacks/Scans seen in the wild
No known false positives
Cisco Talos Intelligence Group
No rule groups
CVE-2017-9248 |
Loading description
|
Tactic: Credential Access
Technique: Brute Force
For reference, see the MITRE ATT&CK vulnerability types here: https://attack.mitre.org