Exploit
exploit:known_exploit
Also: equities, exploit
An unspecified exploit used against the unpatched internet-facing web server to gain access.
An unspecified exploit used against the unpatched internet-facing web server to gain access.
“I was able to actually use the known exploit to gain the right access”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | Apache Tomcat | Derived | 10 |
| incoming | USES | Nation State Actor | Explicit | 10 |
Nation State Actor USES Known exploit
The operator uses a known exploit against an unpatched, internet-facing web server to gain access.
Explicit Confidence 99% · Nsa EP 10 Details
“I was able to actually use the known exploit to gain the right access to that machine.”
Known exploit AFFECTS Apache Tomcat
The known exploit is directed at an internet-facing web server running Apache Tomcat; the exact vulnerability is not identified.
Derived Confidence 78% · Nsa EP 10 Details
“a web server that potentially has vulnerabilities I can exploit”
“like Apache Tomcat running on it”