Posté par: igor51 le décembre 12, 2018, 11:00:08
We detected mining activity on our honeypot that involves the search engine Elasticsearch, which is a Java-developed search engine based on the Lucene library and released as open-source. The attack was deployed by taking advantage of known vulnerabilities CVE-2015-1427, a vulnerability in its Groovy scripting engine that allows remote attackers to execute arbitrary shell commands through a crafted script, and CVE-2014-3120, a vulnerability in the default configuration of Elasticsearch.
The post Cryptocurrency Miner Spreads via Old Vulnerabilities on Elasticsearch appeared first on .
Source: Cryptocurrency Miner Spreads via Old Vulnerabilities on Elasticsearch (http://feeds.trendmicro.com/~r/Anti-MalwareBlog/~3/j_obK2Eck04/)