VDB
SUSE-SU-2018%3A3963-2
SUSE-SU-2018%3A3963-2
PUBLISHED
CVSS 7.5 HIGH
Security update for apache2-mod_jk
Risk Scores
CVSS 3.1
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| apache2 | ||
| SUSE Linux Enterprise Server 12 SP4 | ||
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 |
Exploit Intelligence
- Proof of concept showing how to exploit the CVE-2018-11759 (github-poc-repo)
- Proof of concept showing how to exploit the CVE-2018-11759 (github-poc-repo)
- This exploit for CVE 2018-11759, vulnerability in apache mod_jk, module for load-balancer (github-poc-repo)
- This exploit for CVE 2018-11759, vulnerability in apache mod_jk, module for load-balancer (github-poc-repo)
- 一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblo... (github-poc-repo)
- 一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblo... (github-poc-repo)
- julioliraup/Identificador-CVE-2018-11759 (github-poc-repo)
- julioliraup/Identificador-CVE-2018-11759 (github-poc-repo)
- julioliraup/Identificador-CVE-2018-11759 (github-poc)
- julioliraup/Identificador-CVE-2018-11759 (github-poc)
…and 14 more exploits
Timeline
- May 31, 2019 CVE Published
References
- https://www.suse.com/support/security/rating/ url
- https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_3963-2.json advisory
- https://www.suse.com/support/update/announcement/2018/suse-su-20183963-2/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2019-May/005526.html advisory
- https://bugzilla.suse.com/1114612 advisory
- https://www.suse.com/security/cve/CVE-2018-11759/ advisory