Ghostcat – WindowsTechs.com

Is Tomcat vulnerable to "Ghostcat" (CVE-2020-1938) via mod_proxy_ajp?

Posted on March 10, 2020 by ansichart

Is it possible to exploit the “Ghostcat” vulnerability (CNVD-2020-10487/CVE-2020-1938) indirectly over mod_proxy_ajp?

I was able to successfully test the proof-of-concept exploit (https://www.exploit-db.com/exploits/48143) when targetin… Continue reading Is Tomcat vulnerable to "Ghostcat" (CVE-2020-1938) via mod_proxy_ajp?→

This Week in Security: Let’s Encrypt Revocation, Ghostcat, and the RIDLer

Posted on March 6, 2020 by Jonathan Bennett

Let’s Encrypt recently celebrated their one billionth certificate. That’s over 190 million websites currently secured, and thirteen full-time staff. The annual budget for Lets Encrypt is an eye-watering $3.3+ million, covered by sponsors like Mozilla, Google, Facebook, and the EFF.

A cynic might ask if we need to rewind the …read more

Continue reading This Week in Security: Let’s Encrypt Revocation, Ghostcat, and the RIDLer→