ERP security

build1 publisher

ShinyHunters percent-encode one letter to slip PeopleSoft's 9.8 RCE past the WAF

ShinyHunters is exploiting an unpatched CVSS 9.8 pre-login flaw in Oracle PeopleSoft, encoding one URL character to slip past WAF rules matching the raw path. Mandiant has confirmed JSP web shells on dozens of systems.

Publishers:dev.to

Reality

Evidence55
Adoption: Insufficient
Hype gap0
Incentives: Insufficient
Confidence50

security14 publishers

ShinyHunters pins its claimed FBI breach on an unpatched PeopleSoft RCE

The extortion crew defaced apply.fbijobs.gov on September 22 and told reporters it got remote code execution from a new Oracle PeopleSoft flaw, the same one it says it is now using against Fortune 500 targets. No technical details are public.

Publishers:404media.cobleepingcomputer.comcyberdaily.aucyberinsider.comcyberscoop.comhackread.cominfosecurity-magazine.commalwarebytes.comscworld.comsecurityaffairs.comsecurityweek.comthecyberexpress.comthehackernews.comtherecord.media

Perspective Coverage

14 publishers

Builder: Builder 20%
Operator: Operator 67%
Investor: Investor 13%

Reality

Evidence40
Adoption: Insufficient
Hype gap+40
Incentives75
Confidence60

Current clusters

ShinyHunters percent-encode one letter to slip PeopleSoft's 9.8 RCE past the WAF

ShinyHunters pins its claimed FBI breach on an unpatched PeopleSoft RCE