CVE-2018-11759 Exploitation Attempt
Detects path traversal vulnerability in mod_jk module
Sigma rule (View on GitHub)
1title: CVE-2018-11759 Exploitation Attempt
2id: d65b6211-b689-4ca1-8848-54eb0a94f80c
3status: experimental
4description: Detects path traversal vulnerability in mod_jk module
5references:
6 - https://github.com/immunIT/CVE-2018-11759
7author: Loginsoft Research Unit
8date: 2020/06/17
9logsource:
10 product: apache
11 category: webserver
12detection:
13 selection:
14 c-uri: '*/jkstatus;'
15 sc-status: 200
16 keywords:
17 - 'client denied by server configuration: jkstatus'
18 condition: selection or keywords
19level: medium```