March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – Cuba Ransomware – Active IOCs
February 7, 2022
Rewterz Threat Alert – NetWire RAT Malware – Active IOCs
February 8, 2022
Rewterz Threat Alert – Cuba Ransomware – Active IOCs
February 7, 2022
Rewterz Threat Alert – NetWire RAT Malware – Active IOCs
February 8, 2022
Severity
Medium
Analysis Summary
CVE-2022-22931
Apache James could allow a remote authenticated attacker to traverse directories on the system, caused by not prepend delimiters during directory validations. An attacker could send a specially-crafted URL request containing “dot dot” sequences (/../) to access other users data stores.
Impact
- Unauthorized Access
Indicators of Compromise
CVE
- CVE-2022-22931
Affected Vendors
Apache
Affected Products
- Apache James 3.6.1
Remediation
Upgrade to the latest version of Apache James, available from the Apache Web site.