Drupal core Remote Code Execution - SA-CORE-2018-002

Security annoucements of interest to the AtomiCorp community, such as vulnerabilities in third party applications.
User avatar
mikeshinn
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 4133
Joined: Thu Feb 07, 2008 7:49 pm
Location: Chantilly, VA

Drupal core Remote Code Execution - SA-CORE-2018-002

Unread post by mikeshinn »

ASL, Reverse Proxy and modsecurity rules customers were already protected from SA-CORE-2018-002 via our generic protection modsecurity rules. We've also added a specific rule so that users will know if this specific attack is being directed at their systems. The rule number is 390755.

There is no need to update to be protected from this attack. However, if you wish to notified of this specific attack, as opposed to being notified of a general attack, update to the latest modsecurity rules.
Post Reply