how to get vulnerability signature pattern

Reply

how to get vulnerability signature pattern

HI @reaper 

 

Palo alto is releasing content update every week and changes in default action will be changed periodically.

 

Recenty in Content version 8146 vulnerability 55570  Oracle WebLogic wls9-async Remote Code Execution Vulnerability  action is set to resert-server. 

 

How can i get the signature pattern used by this vulnerability to confirm the incoming data is vulnerable. When palo alto confirm incoming data is vulnerable by matching with this vulnerability id then how can i get that vulnerable data payload.

 

Regards

Venky

Community Manager

Re: how to get vulnerability signature pattern

If you enable extended (or single packet) pcap in the security profile, you will get the offending packet

Help the community: Like helpful comments and mark solutions
Reaper out

Re: how to get vulnerability signature pattern

 Can i able to find the signature pattern used by specific vulnerability.

 

Regards

Venky

Community Manager

Re: how to get vulnerability signature pattern

If you know the associated CVE you can research the vulnerability on MITRE, but you cant extract the pattern from our database

Help the community: Like helpful comments and mark solutions
Reaper out
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!