Patchfirst

A brief history and further technical analysis of Sodinokibi Ransomware

picussecurity.com · Undated · Licence: not cleared; local research copy only

Read the original ↗

CVEs this report names

1 CVE
  1. CVE-2019-2725Oracle WebLogic Server, Injection
    Oracle · WebLogic ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter4 reports
    >99.9%Top 0.02%
    88.8priority

Where it names them

CVE-2019-2725
Exploit Public-Facing Application (ATT&CK T1190) : Attackers exploit vulnerabilities in enterprise applications to distribute it, such as the deserialization vulnerability CVE-2019-2725 in Oracle WebLogic Server having a CVSS score of 9.8/10.
Original (opens in a new tab) ↗

Techniques drawn from this report

1 link, in kill-chain order

Initial Access Exploit Public-Facing Application T1190 for CVE-2019-2725

MITRE CTID mapping of the CVE

Exploit Public-Facing Application (ATT&CK T1190) : Attackers exploit vulnerabilities in enterprise applications to distribute it, such as the deserialization vulnerability CVE-2019-2725 in Oracle WebLogic Server having a CVSS score of 9.8/10.
Original (opens in a new tab) ↗
↑ ↓ chooseEnter openEsc close