Optiv’s gTIC Prioritized Software and Services List + MITRE Tactics Part II: Apache
Tags
cmtmf-attack-pattern: Application Layer Protocol Compromise Infrastructure Exploit Public-Facing Application Scheduled Task/Job
country: Germany United States Of America
attack-pattern: Data Models Application Layer Protocol - T1437 Botnet - T1583.005 Botnet - T1584.005 Compromise Infrastructure - T1584 Cron - T1053.003 Data Encrypted For Impact - T1471 Data Encrypted For Impact - T1486 Data From Local System - T1533 Exfiltration Over C2 Channel - T1646 Exploitation For Privilege Escalation - T1404 Exploit Public-Facing Application - T1377 Malware - T1587.001 Malware - T1588.001 Scheduled Task/Job - T1603 Server - T1583.004 Server - T1584.004 Server Software Component - T1505 Software - T1592.002 Vulnerabilities - T1588.006 Standard Application Layer Protocol - T1071 Data From Local System - T1005 Exfiltration Over Command And Control Channel - T1041 Exploit Public-Facing Application - T1190 Exploitation For Privilege Escalation - T1068 Network Service Scanning - T1046 Scheduled Task - T1053 Valid Accounts - T1078 Denial Of Service Exploit Public-Facing Application Valid Accounts
Show in Graph
Common Information
Type Value
UUID a41098a6-feef-4c87-b9ee-4460b4f3b75e
Fingerprint bb3004536503ff02
Analysis status DONE
Considered CTI value 2
Text language
Published Feb. 1, 2023, noon
Added to db Nov. 6, 2023, 7:34 p.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline UNKNOWN
Title Optiv’s gTIC Prioritized Software and Services List + MITRE Tactics Part II: Apache
Detected Hints/Tags/Attributes 99/3/44
Source URLs
Redirection Url
Details Source https://www.optiv.com/insights/source-zero/blog/optivs-gtic-prioritized-software-and-services-list-mitre-tactics-part-ii
URL Provider
Details Provider Source level domain
Details optiv.com www.optiv.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 346 ✔ Optiv Blog https://www.optiv.com/resources/blog/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 122 
cve-2017-5638
Details CVE 26 
cve-2018-11776
Details CVE 12 
cve-2019-0211
Details CVE 3 
cve-2021-42340
Details CVE 5 
cve-2022-22721
Details CVE 4 
cve-2022-23943
Details CVE 17 
cve-2021-40438
Details CVE 7 
cve-2021-44790
Details CVE 44 
cve-2021-41773
Details CVE 19 
cve-2020-1938
Details CVE 25 
cve-2021-42013
Details Domain 360 
attack.mitre.org
Details Domain 6 
fidelissecurity.com
Details Domain 24 
duo.com
Details Domain 19 
jira.atlassian.com
Details Domain 641 
nvd.nist.gov
Details Domain 78 
securityaffairs.co
Details Domain 32 
www.qnap.com
Details Domain 1 
thenewstack.io
Details Domain 255 
www.optiv.com
Details File 1 
threat-intelligence-summary_f_july_2022.pdf
Details File 1 
cve-2021-40438-apache-http-server-attacks.html
Details File 263 
www.opt
Details MITRE ATT&CK Techniques 66 
T1584
Details MITRE ATT&CK Techniques 542 
T1190
Details MITRE ATT&CK Techniques 480 
T1053
Details MITRE ATT&CK Techniques 67 
T1505
Details MITRE ATT&CK Techniques 306 
T1078
Details MITRE ATT&CK Techniques 208 
T1068
Details MITRE ATT&CK Techniques 168 
T1046
Details MITRE ATT&CK Techniques 534 
T1005
Details MITRE ATT&CK Techniques 422 
T1041
Details MITRE ATT&CK Techniques 444 
T1071
Details MITRE ATT&CK Techniques 472 
T1486
Details Url 5 
https://attack.mitre.org/resources/terms-of-use
Details Url 1 
https://sec.cloudapps.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-apache-httpd-2.4.49
Details Url 1 
https://fidelissecurity.com/wp-content/uploads/2022/08/threat-intelligence-summary_f_july_2022.pdf
Details Url 1 
https://duo.com/decipher/apache-patches-serious-privilege-escalation-flaw
Details Url 1 
https://jira.atlassian.com/browse/jraserver-72914
Details Url 1 
https://nvd.nist.gov/vuln/detail/cve-2021-42013
Details Url 1 
https://securityaffairs.co/125107/hacking/cve-2021-40438-apache-http-server-attacks.html
Details Url 1 
https://www.qnap.com/en/security-advisory/qsa-22-11
Details Url 1 
https://nakedsecurity.sophos.com/2021/12/21/apaches-other-product-critical-bugs-in-httpd-web-server-patch-now
Details Url 1 
https://thenewstack.io/theres-a-nasty-security-hole-in-the-apache-webserver