ET EXPLOIT Apache Spark RPC - Unauthenticated RegisterApplication Request (CVE-2020-9480) - Suricata Rule 2035003 (et/open)

ET EXPLOIT Apache Spark RPC - Unauthenticated RegisterApplication Request (CVE-2020-9480)

7.0.3 5.0SID: 2035003Rev: 3Enabled2 views

Fileemerging-exploit.rules

CreatedJanuary 28, 2022

UpdatedMarch 14, 2024

Classificationattempted-admin

alert tcp-pkt any any -> $HOME_NET any (msg:"ET EXPLOIT Apache Spark RPC - Unauthenticated RegisterApplication Request (CVE-2020-9480)"; flow:established,to_server; flowbits:isnotset,ET.ApacheSpark_AuthAttempted; flowbits:isnotset,ET.ApacheSpark_CE; flowbits:set,ET.ApacheSpark_UnauthRegisterApplication; content:"org.apache.spark.deploy.DeployMessages$RegisterApplication"; fast_pattern; reference:cve,2020-9480; reference:url,www.youtube.com/watch?v=EAzdGo-i8vE; reference:url,github.com/ayoul3/sparky/; classtype:attempted-admin; sid:2035003; rev:3; metadata:attack_target Server, created_at 2022_01_28, cve CVE_2020_9480, deployment Internal, deployment Datacenter, performance_impact Low, confidence High, signature_severity Major, updated_at 2024_03_14; target:dest_ip;)

References

cve	2020-9480
url	www.youtube.com/watch?v=EAzdGo-i8vE
url	github.com/ayoul3/sparky/

Metadata

attack targetServer

created at2022_01_28

cve

CVE-2020-9480

deploymentDatacenter

performance impactLow

confidenceHigh

signature severityMajor

updated at2024_03_14

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!