Preparing the Internet for the Next Mega DDoS Attack

When you think of a distributed denial-of-service DDoS attack at this point in the age of the internet, you might be thinking they’re old news. But when a multi-million-dollar business can be easily taken offline by an unskilled adversary and a $5 rent-a-DDoS service, I would argue that the issue...

Finding Weaknesses Before the Attackers Do

This blog post originally appeared as an article in M-Trends 2019. FireEye Mandiant red team consultants perform objectives-based assessments that emulate real cyber attacks by advanced and nation state attackers across the entire attack lifecycle by blending into environments and observing how...

Latest Drupal RCE Flaw Used by Cryptocurrency Miners and Other Attackers

Another remote code execution vulnerability has been revealed in Drupal, the popular open-source Web content management system. One exploit — still working at time of this writing — has been used in dozens of unsuccessful attacks against our customers, with an unknown number of attacks, some like...

CVE-2019-2550

CVE-2019-2550 affects Oracle FLEXCUBE Direct Banking (Logoff Page) version 12.0.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to affect Oracle FLEXCUBE Direct Banking, with exploitation requiring human interaction. Reported impact: unauthorized update/insert...

CVE-2019-2549

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Logoff Page. The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2550

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Logoff Page. The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2549

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Logoff Page. The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

SAP Enterprise Financial Services Remote Authorization Bypass Vulnerability

SAP Enterprise Financial Services is a set of enterprise financial services solutions from SAP. A remote authorization bypass vulnerability exists in SAP Enterprise Financial Services, which can be exploited by a remote attacker to elevate privileges due to a program's failure to perform required...

Authorization

SAP Enterprise Financial Services fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.6320 does not perform necessary authorization checks for an authenticated user, resulting in escalation of...

CVE-2018-2484

SAP Enterprise Financial Services fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.6320 does not perform necessary authorization checks for an authenticated user, resulting in escalation of...

CVE-2018-2484

CVE-2018-2484 (SAP Enterprise Financial Services) is a privilege-escalation vulnerability caused by a failure to perform necessary authorization checks for an authenticated user. The affected stack includes SAP Enterprise Financial Services (fixed in SAPSCORE 1.13, 1.14, 1.15), S4CORE (1.01–1.03)...

Ford Eyes Using Personal Data to Boost Profits

UPDATE Ford Motor Company is known for making cars and trucks; but the future for the iconic automaker might look a little more like Facebook than an assembly line. As it struggles with hemorrhaging earnings in markets outside of North America, industry-watchers are speculating that Ford is looki...

FasterXML Jackson-databind Polymorphic Deserialization Multiple Security Vulnerability

Description FasterXML Jackson-databind is prone to multiple security vulnerabilities. Successfully exploiting these issues may allow an attacker to execute arbitrary code, bypass certain security restrictions, perform unauthorized actions or obtain potentially sensitive information. Failed exploi...

The vulnerability of the EAFS_BCA_BUSOPR_SEPA function in the SAP Enterprise Financial Services software platform, which allows a perpetrator to enhance their privileges.

The vulnerability of the EAFSBCABUSOPRSEPA function in the SAP Enterprise Financial Services software platform is related to authentication process errors. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the EAFS_BCA_BUSOPR_2 function in the SAP Enterprise Financial Services software platform, which allows attackers to enhance their privileges.

The vulnerability of the EAFSBCABUSOPR2 function in the SAP Enterprise Financial Services software platform is related to errors in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

State of the Internet Security - Credential Stuffing

Credential stuffing, and the botnets behind this activity, is the primary focus of the State of the Internet Security Report, Issue 4, 2018. Credential stuffing, the use of botnets to try to login to a site with stolen or randomly created login information, isn't a new phenomenon, but it is one...

SAP Enterprise Financial Services Remote Authorization Bypass Vulnerability (CNVD-2019-08545)

SAP Enterprise Financial Services is a set of enterprise financial services solutions from SAP. A remote authorization bypass vulnerability exists in SAP Enterprise Financial Services, which could be exploited by an attacker to gain unauthorized access and obtain sensitive information...

CVE-2018-2454

SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 in business function EAFSBCABUSOPR2 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2018-2455

SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 in business function EAFSBCABUSOPRSEPA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

Authorization

SAP Enterprise Financial Services, versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0 in business function EAFSBCABUSOPRSEPA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...