3 ms·
In case anybody is wondering, this is the attack vector that was used for the equifax hack and is also used in a fair number of remote code execution exploits f
by kpcyrd 8y ago
In case anybody is wondering, this is the attack vector that was used for the equifax hack and is also used in a fair number of remote code execution exploits for java servers.
- latchkey 8y agoThrough the fact that Struts did not implement things correctly and equifax did not upgrade their systems. It also sounds like it was multiple vulnerabilities. Like this one as well: https://www.cvedetails.com/cve/CVE-2017-5638/ https://www.cvedetails.com/cve/CVE-2017-5638/