219.94.245.101

Regular View Raw Data
Last Seen: 2024-05-20
Tags:
database

GeneralInformation

Hostnames www4327ue.sakura.ne.jp
Domains sakura.ne.jp 
Country Japan
City Osaka
Organization SAKURA Internet Inc.
ISP SAKURA Internet Inc.
ASN AS9371

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-1938 7.5When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible.

OpenPorts

241934860 | 2024-05-14T01:21:49.103930
  
21 / tcp
-193697664 | 2024-05-14T21:38:15.021229
  
22 / tcp
982015684 | 2024-05-20T17:31:43.655238
  
80 / tcp
854662341 | 2024-05-20T13:21:28.571075
  
3306 / tcp
-1229623407 | 2024-05-14T05:51:06.742384
  
8009 / tcp
-638534876 | 2024-05-20T21:49:58.110188
  
8080 / tcp



Contact Us

Shodan ® - All rights reserved