CVE-2019-0227 in apache axis
LogPulse has a published detection rule for this CVE: it raises a notable when someone tries to exploit it.
What the vulnerability is
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.
Affected software: apache axis, oracle agile engineering data management, oracle agile product lifecycle management, oracle application testing suite, oracle big data discovery, oracle communications asap cartridges, oracle communications design studio, oracle communications element manager, oracle communications network integrity, oracle communications order and service management
Scores
- CVSS: 7.5 (high)
- EPSS: 91.94% chance of exploitation in the next 30 days
- CISA KEV: Not listed
- Published: 2019-05-01
What LogPulse has for it
- Detection rule: Yes, published
- Agent check (vulnerable version): No
- Mitigation: No
Source data: NIST NVD, CISA KEV and FIRST EPSS. LogPulse processes new CVEs every hour.
We build every detection with great care, but no two environments are the same. Log sources, parsing and configuration differ, so test a detection in your own environment before you rely on it.