192.241.181.88

Regular View Raw Data
Last Seen: 2024-04-24
Tags:
cloud

GeneralInformation

Hostnames adsjoy.com
Domains adsjoy.com 
Cloud Provider DigitalOcean
Cloud Region us-ny
Country United States
City New York City
Organization DigitalOcean, LLC
ISP DigitalOcean, LLC
ASN AS14061

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-1938 7.5When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible.

OpenPorts

1633209553 | 2024-04-17T15:09:48.271974
  
80 / tcp
-1345205424 | 2024-04-03T06:10:15.158650
  
111 / tcp
-1345205424 | 2024-04-24T10:32:18.507880
  
111 / udp
1855878921 | 2024-03-27T20:42:44.346742
  
123 / udp
2116786347 | 2024-04-22T01:23:10.994195
  
443 / tcp
-1229623407 | 2024-04-05T22:25:01.414884
  
8009 / tcp



Contact Us

Shodan ® - All rights reserved