SERVER-WEBAPP -- Snort has detected traffic exploiting vulnerabilities in web based applications on servers.
SERVER-WEBAPP IBM Data Risk Manager nmap scan command execution attempt
This rule looks for attempts to likely trigger a command execution vulnerability in IBM's Data Risk Manager's nmap scan API. This rule looks for all requests to the vulnerable nmap scan API.
This rule looks for attempts to trigger a likely command execution vulnerability in IBM's Data Risk Manager.
No public information
No known false positives
Cisco Talos Intelligence Group
No rule groups
CVE-2020-4428 |
Loading description
|
Tactic: Execution
Technique: Execution through API
For reference, see the MITRE ATT&CK vulnerability types here: https://attack.mitre.org