Rule Info
Name
CVE-2023-22518 Exploitation Attempt - Suspicious Confluence Child Process (Linux)
Author
Andreas Braathen (mnemonic.io)
Description
Detects exploitation attempt of CVE-2023-22518 (Confluence Data Center / Confluence Server), where an attacker can exploit vulnerable endpoints to e.g. create admin accounts and execute arbitrary commands.
Date
2023-11-14 00:00:00
Modified
None
Id
f8987c03-4290-4c96-870f-55e75ee377f4
Tags
detection.emerging-threats attack.execution attack.t1059 attack.initial-access attack.t1190 cve.2023-22518 DEMO
Type
Community Rule
Link to Public Repo
Scan your endpoints, forensic images or collected files with our portable scanner THOR