GitHub - horizon3ai/CVE-2022-47966: POC for CVE-2022-47966 affecting multiple ManageEngine products
Tags
attack-pattern: | Software - T1592.002 |
Common Information
Type | Value |
---|---|
UUID | c183ca9d-77dc-4de9-b8f8-beec83ccf035 |
Fingerprint | ac1465fe0977ff40 |
Analysis status | DONE |
Considered CTI value | 0 |
Text language | |
Published | Jan. 19, 2023, midnight |
Added to db | Feb. 18, 2023, 12:59 a.m. |
Last updated | Nov. 16, 2024, 3:14 p.m. |
Headline | horizon3ai/CVE-2022-47966 |
Title | GitHub - horizon3ai/CVE-2022-47966: POC for CVE-2022-47966 affecting multiple ManageEngine products |
Detected Hints/Tags/Attributes | 20/1/18 |
Source URLs
Redirection | Url | |
---|---|---|
Details | Source | https://github.com/horizon3ai/CVE-2022-47966 |
URL Provider
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | CVE | 76 | cve-2022-47966 |
|
Details | Domain | 24 | www.horizon3.ai |
|
Details | Domain | 2 | blog.viettelcybersecurity.com |
|
Details | Domain | 3 | cve-2022-47966.py |
|
Details | Domain | 4 | sts.windows.net |
|
Details | Domain | 136 | horizon3.ai |
|
Details | File | 155 | horizon3.ai |
|
Details | File | 16 | runtime.exe |
|
Details | File | 3 | cve-2022-47966.py |
|
Details | File | 380 | notepad.exe |
|
Details | IPv4 | 2 | 10.0.40.90 |
|
Details | IPv4 | 4 | 10.0.40.64 |
|
Details | Url | 1 | https://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive |
|
Details | Url | 1 | https://blog.viettelcybersecurity.com/saml-show-stopper |
|
Details | Url | 1 | https://www.horizon3.ai/manageengine-cve-2022-47966-iocs |
|
Details | Url | 2 | https://10.0.40.90:8443/samllogin |
|
Details | Url | 2 | https://sts.windows.net |
|
Details | Url | 2 | https://10.0.40.64:8080/samlresponseservlet |