March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – CVE-2022-40145 – Apache Karaf Vulnerability
December 29, 2022
Rewterz Threat Alert – Phobos Ransomware – Active IOCs
December 29, 2022
Rewterz Threat Advisory – CVE-2022-40145 – Apache Karaf Vulnerability
December 29, 2022
Rewterz Threat Alert – Phobos Ransomware – Active IOCs
December 29, 2022
Severity
High
Analysis Summary
CVE-2022-45347
Apache ShardingSphere-Proxy could allow a remote attacker to bypass security restrictions, caused by the failure to cleanup the database session completely after client authentication failed by the database backend when using MySQL. By constructing a special MySQL client, an attacker could exploit this vulnerability to execute normal commands.
Impact
- Security Bypass
Indicators Of Compromise
CVE
- CVE-2022-45347
Affected Vendors
Apache
Affected Products
- Apache ShardingSphere-Proxy 5.0.0
Remediation
Upgrade to the latest version of ShardingSphere, available from the Apache Website.