December 3, 2023
Severity High Analysis Summary A new and sophisticated Android malware, named FjordPhantom, has been disclosed by cybersecurity researchers. The malware targets users in Southeast Asian countries, […]
Rewterz Threat Advisory – CVE-2022-40145 – Apache Karaf Vulnerability
December 29, 2022Rewterz Threat Alert – Phobos Ransomware – Active IOCs
December 29, 2022Rewterz Threat Advisory – CVE-2022-40145 – Apache Karaf Vulnerability
December 29, 2022Rewterz Threat Alert – Phobos Ransomware – Active IOCs
December 29, 2022
Severity
High
Analysis Summary
CVE-2022-45347
Apache ShardingSphere-Proxy could allow a remote attacker to bypass security restrictions, caused by the failure to cleanup the database session completely after client authentication failed by the database backend when using MySQL. By constructing a special MySQL client, an attacker could exploit this vulnerability to execute normal commands.
Impact
- Security Bypass
Indicators Of Compromise
CVE
- CVE-2022-45347
Affected Vendors
Apache
Affected Products
- Apache ShardingSphere-Proxy 5.0.0
Remediation
Upgrade to the latest version of ShardingSphere, available from the Apache Website.