POLICY-OTHER --
POLICY-OTHER Oracle E-Business Suite TCF Server access attempt
This rule blocks potential SQL execution attempts leveraging an arbitrary SQL injection vulnerability in the custom protocol between the Forms Java client and the EBS webserver.
Rule fires on any external access attempts to the vulnerable Oracle E-Business Suite TCF Server. $EXTERNAL_NET must be defined as !$HOME_NET for this to detect only external access.
No public information
No known false positives
Cisco Talos Intelligence Group
No rule groups
Authentication Bypass
An Authentication Bypass occurs when there is a way to avoid providing user credentials to a system before performing restricted operations on said system.
CVE-2019-2633 |
Loading description
|
CVE-2019-2638 |
Loading description
|
Tactic: Initial Access
Technique: Drive-by Compromise
For reference, see the MITRE ATT&CK vulnerability types here: https://attack.mitre.org