CVE2022

CVE-2022-33891

2Rules

3References

1Folders

2023-01-02Latest

Summary

CVE-2022-33891 is tracked here through 2 Sigma detections for exploitation attempts and related post-exploitation behavior observed in 2022. Coverage centers on linux / process_creation, webserver.

Related Detections

Search this threat

Emerging Threathightest

Apache Spark Shell Command Injection - Weblogs

Detects attempts to exploit an apache spark server via CVE-2014-6287 from a weblogs perspective

Web Server Log

TA0001 · Initial AccessT1190 · Exploit Public-Facing Applicationcve.2022-33891detection.emerging-threats

Nasreddine Bencherchali (Nextron Systems)Tue Jul 192022

Emerging Threathightest

Apache Spark Shell Command Injection - ProcessCreation

Detects attempts to exploit an apache spark server via CVE-2014-6287 from a commandline perspective

LinuxProcess Creation

TA0001 · Initial AccessT1190 · Exploit Public-Facing Applicationcve.2022-33891detection.emerging-threats

Nasreddine Bencherchali (Nextron Systems)Wed Jul 202022

References