topic Re: There is no CVE-2019-9082 signature in Custom Signatures

There is no CVE-2019-9082 signature

bt.guvenlik — Fri, 03 May 2019 13:58:51 GMT

Hi,

Nowadays some attackers attack our web site relevant code injection. Perimeter firewall is Palo Alto and seperator firewall is Fortinet. This attack type is below that's not keeping by PA but it's keeping FG so prevent.

I obsevered this signature but I couldn't find on the PA database.

This type of attack are increase last a few mounth.

please help, you sign that signature by PA and update.

CVE-2019-9082

ThinkPHP.Controller.Parameter.Remote.Code.Execution

Re: There is no CVE-2019-9082 signature

fmopiy — Fri, 03 May 2019 14:32:49 GMT

Hi,

Thank you for this information. We currently do not have coverage for this. I have requested coverage assessment based on the POC provided.

Regards,

Faith.

Re: There is no CVE-2019-9082 signature

allee — Fri, 19 Jul 2019 03:48:20 GMT

Just closing the loop on this post, looks like threatvault (https://threatvault.paloaltonetworks.com/) is now displaying coverage for CVE-2019-9082 as threat ID 54825.