SERVER-WEBAPP -- Snort has detected traffic exploiting vulnerabilities in web based applications on servers.
SERVER-WEBAPP OneDev pre-authentication token leak attempt
This rule detects an attempted pre-authentication token leak in vulnerable versions of OneDev by looking for connection attempts to the unprotected URI.
This rule detects an attempted pre-authentication token leak in vulnerable versions of OneDev.
No public information
No known false positives
Cisco Talos Intelligence Group
No rule groups
Authentication Bypass
An Authentication Bypass occurs when there is a way to avoid providing user credentials to a system before performing restricted operations on said system.
CVE-2021-21246 |
Loading description
|
Tactic: Initial Access
Technique: Exploit Public-Facing Application
For reference, see the MITRE ATT&CK vulnerability types here: https://attack.mitre.org