GitHub - horizon3ai/CVE-2022-47966: POC for CVE-2022-47966 affecting multiple ManageEngine products
Tags
attack-pattern: Software - T1592.002
Common Information
Type Value
UUID c183ca9d-77dc-4de9-b8f8-beec83ccf035
Fingerprint ac1465fe0977ff40
Analysis status DONE
Considered CTI value 0
Text language
Published Jan. 19, 2023, midnight
Added to db Feb. 18, 2023, 12:59 a.m.
Last updated Nov. 16, 2024, 3:14 p.m.
Headline horizon3ai/CVE-2022-47966
Title GitHub - horizon3ai/CVE-2022-47966: POC for CVE-2022-47966 affecting multiple ManageEngine products
Detected Hints/Tags/Attributes 20/1/18
Attributes
Details Type #Events CTI Value
Details CVE 76
cve-2022-47966
Details Domain 24
www.horizon3.ai
Details Domain 2
blog.viettelcybersecurity.com
Details Domain 3
cve-2022-47966.py
Details Domain 4
sts.windows.net
Details Domain 136
horizon3.ai
Details File 155
horizon3.ai
Details File 16
runtime.exe
Details File 3
cve-2022-47966.py
Details File 380
notepad.exe
Details IPv4 2
10.0.40.90
Details IPv4 4
10.0.40.64
Details Url 1
https://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive
Details Url 1
https://blog.viettelcybersecurity.com/saml-show-stopper
Details Url 1
https://www.horizon3.ai/manageengine-cve-2022-47966-iocs
Details Url 2
https://10.0.40.90:8443/samllogin
Details Url 2
https://sts.windows.net
Details Url 2
https://10.0.40.64:8080/samlresponseservlet