topic Re: CVE-2021-31805 in Firewall and Security Management

CVE-2021-31805

Gaurav_Pandya — Thu, 14 Apr 2022 13:52:00 GMT

Hi,

What is Checkpoint response for CVE-2021-31805? This is an RCE for Apache Struts 2.

Apache

https://cwiki.apache.org/confluence/display/WW/S2-062

Mitre

https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-31805

Re: CVE-2021-31805

PhoneBoy — Thu, 14 Apr 2022 14:57:02 GMT

In what capacity, an IPS signature?
I presume we'll have one shortly if that's the case.

Re: CVE-2021-31805

the_rock — Thu, 14 Apr 2022 15:16:09 GMT

I dont believe its addressed yet, as there are no SK's about it or anything listed for this CVE in IPS protections.

Andy

Re: CVE-2021-31805

Gaurav_Pandya — Fri, 15 Apr 2022 17:30:03 GMT

Can we expect IPS signature to be released? Or any kind of protection?

Re: CVE-2021-31805

the_rock — Fri, 15 Apr 2022 17:31:51 GMT

That, I have no clue mate. I would let one of CP employees answer that question for you.

Andy

Re: CVE-2021-31805

Gaurav_Pandya — Mon, 18 Apr 2022 16:59:12 GMT

Hi PhoneBoy,

Do you have any idea about this? How Checkpoint can protect this vulnerability. Still there is no IPS signature.

Re: CVE-2021-31805

the_rock — Mon, 18 Apr 2022 19:16:47 GMT

Just my personal suggestion...if I were you, I would either contact your local SE and see if they have any details on it and also contact TAC and maybe ask them if there is anything internal they can find. I understand they are not allowed to share internal info, but at least they can tell you if there is anything about it.

Re: CVE-2021-31805

Gaurav_Pandya — Tue, 19 Apr 2022 13:19:28 GMT

Thanks. I will check with SE

Re: CVE-2021-31805

Gaurav_Pandya — Wed, 04 May 2022 09:05:45 GMT

I have raised a TAC case for the same and now we have IPS signature for CVE-2021-31805