Intrusion PreventionApache.OFBiz.loadJWT.Authentication.Bypass
Description
This indicates an attack attempt to exploit an Authentication Bypass Vulnerability in Apache Software Foundation OFBiz.
This vulnerability is due to improper validation of user input. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target server. Successful exploitation would result in the authentication bypass and lead to further possible damages.
Affected Products
Apache Software Foundation OFBiz before 18.12.12
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://lists.apache.org/thread/rplfjp7ppn9ro49oo7jsrpj99m113lfc
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 54999 |
| Created | Mar 13, 2024 |
| Updated | Mar 21, 2024 |
| Risk |
|
| CVE ID | CVE-2024-25065 |
| Exploit Prediction Score | 0.04% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Apache |