Re: CVE-2021-31805

Gaurav_Pandya · ‎2022-04-14

Hi,

What is Checkpoint response for CVE-2021-31805? This is an RCE for Apache Struts 2.

Apache

https://cwiki.apache.org/confluence/display/WW/S2-062

Mitre

https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-31805

PhoneBoy · ‎2022-04-14

In what capacity, an IPS signature?
I presume we'll have one shortly if that's the case.

Gaurav_Pandya · ‎2022-04-18

Hi PhoneBoy,

Do you have any idea about this? How Checkpoint can protect this vulnerability. Still there is no IPS signature.

the_rock · ‎2022-04-18

Just my personal suggestion...if I were you, I would either contact your local SE and see if they have any details on it and also contact TAC and maybe ask them if there is anything internal they can find. I understand they are not allowed to share internal info, but at least they can tell you if there is anything about it.

Gaurav_Pandya · ‎2022-04-19

Thanks. I will check with SE

the_rock · ‎2022-04-14

I dont believe its addressed yet, as there are no SK's about it or anything listed for this CVE in IPS protections.

Andy

Gaurav_Pandya · ‎2022-04-15

Can we expect IPS signature to be released? Or any kind of protection?

the_rock · ‎2022-04-15

That, I have no clue mate. I would let one of CP employees answer that question for you.

Andy

Gaurav_Pandya · ‎2022-05-04

I have raised a TAC case for the same and now we have IPS signature for CVE-2021-31805

Are you a member of CheckMates?

CVE-2021-31805