Intrusion PreventionApache.Axis.StockQuoteService.jws.Remote.Code.Execution
Description
This indicates an attack attempt against a Cross-Site Request-Forgery vulnerability in Apache Axis.
The vulnerability is due to insufficient sanitization of user supplied inputs in the application. An attacker may exploit this to cause the server to perform certain actions in the context of an authorized user's session.
Affected Products
Apache Axis 1.4 and prior
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://travis-ci.org/apache/axis1-java
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-05-17 | 18.080 | Sig Added |
| 2020-12-08 | 16.975 | Sig Added |
| 2019-08-22 | 14.675 | Default_action:pass:drop |
| 2019-08-13 | 14.668 |
| ID | 48290 |
| Created | Aug 13, 2019 |
| Updated | Apr 17, 2023 |
| Risk |
|
| CVE ID | CVE-2019-0227 |
| Exploit Prediction Score | 87.14% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, MacOS |
| Affected App | Apache |