{"id":1206991,"date":"2023-11-28T19:38:34","date_gmt":"2023-11-29T00:38:34","guid":{"rendered":"https:\/\/www.prime-wow.com\/?p=1206991"},"modified":"2023-11-28T19:38:34","modified_gmt":"2023-11-29T00:38:34","slug":"owncloud-vulnerability-with-maximum-10-severity-score-comes-under-mass-exploitation","status":"publish","type":"post","link":"https:\/\/www.prime-wow.com\/?p=1206991","title":{"rendered":"ownCloud vulnerability with maximum 10 severity score comes under \u201cmass\u201d exploitation"},"content":{"rendered":"<div id=\"rss-wrap\">\n<figure class=\"intro-image intro-left\">\n  <img decoding=\"async\" src=\"https:\/\/www.prime-wow.com\/wp-content\/uploads\/2023\/11\/exploit-800x534-1.jpg\" alt=\"Photograph depicts a security scanner extracting virus from a string of binary code. Hand with the word &quot;exploit&quot;\" \/><\/p>\n<p class=\"caption\" style=\"font-size:0.8em\"><a href=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2023\/01\/exploit.jpg\" class=\"enlarge-link\" data-height=\"667\" data-width=\"1000\">Enlarge<\/a> (credit: Getty Images)<\/p>\n<\/figure>\n<div><a name=\"page-1\" \/><\/div>\n<p>Security researchers are tracking what they say is the \u201cmass exploitation\u201d of a security vulnerability that makes it possible to take full control of servers running ownCloud, a widely used open-source filesharing server app.<\/p>\n<p>The vulnerability, which carries the maximum severity rating of 10, makes it possible to obtain passwords and cryptographic keys allowing administrative control of a vulnerable server by sending a simple Web request to a static URL, ownCloud officials <a href=\"https:\/\/owncloud.com\/security-advisories\/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments\/\">warned <\/a> last week. Within four days of the November 21 disclosure, researchers at security firm Greynoise <a href=\"https:\/\/www.greynoise.io\/blog\/cve-2023-49103-owncloud-critical-vulnerability-quickly-exploited-in-the-wild\">said<\/a>, they began observing \u201cmass exploitation\u201d in their honeypot servers, which masqueraded as vulnerable ownCloud servers to track attempts to exploit the vulnerability. The number of IP addresses sending the web requests has slowly risen since then. At the time this post went live on Ars, it had reached 13.<\/p>\n<h2>Spraying the Internet<\/h2>\n<p>\u201cWe&#8217;re seeing hits to the specific endpoint that exposes sensitive information, which would be considered exploitation,\u201d Glenn Thorpe, senior director of security research &amp; detection engineering at Greynoise, <a href=\"https:\/\/infosec.exchange\/@ntkramer\/111490170969688520\">said in an interview<\/a> on Mastodon. \u201cAt the moment, we&#8217;ve seen 13 IPs that are hitting our unadvertised sensors, which indicates that they are pretty much spraying it across the internet to see what hits.\u201d<\/p>\n<\/div>\n<p><a href=\"https:\/\/arstechnica.com\/?p=1986988#p3\">Read 11 remaining paragraphs<\/a> | <a href=\"https:\/\/arstechnica.com\/?p=1986988&amp;comments=1\">Comments<\/a><\/p>\n<p>&#013;<br \/>\n&#013;<br \/>\nSource: Ars Technica &#8211; <a href=\"https:\/\/arstechnica.com\/?p=1986988\" target=\"_blank\" rel=\"noopener\">ownCloud vulnerability with maximum 10 severity score comes under \u201cmass\u201d exploitation<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enlarge (credit: Getty Images) Security researchers are tracking what they say is the \u201cmass exploitation\u201d of a security vulnerability that makes it possible to take full control of servers running ownCloud, a widely used open-source filesharing server app. The vulnerability, &hellip; <a href=\"https:\/\/www.prime-wow.com\/?p=1206991\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1206992,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27,110],"tags":[73],"class_list":["post-1206991","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ars-technica","category-unfiltered-rss","tag-ars-technica"],"_links":{"self":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1206991","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1206991"}],"version-history":[{"count":0,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1206991\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/media\/1206992"}],"wp:attachment":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1206991"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1206991"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1206991"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}