QlikSense
Qlik Sense
- 4 paths
*.txt*.log- Version 1
- Abdelkarim CHORFI - CERT CWATCH - ALMOND
Paths on disk
4 paths
Notes
Qlik Sense is a powerful business intelligence solution that enables users to visualize and analyze complex data.
We have seen three vulnerabilities (CVE-2023-41266, CVE-2023-41265, and CVE-2023-48365) exploited on exposed Qlik solution in a recent Cactus Ransomware Campaign:
You can find details on the full exploit here:
References
5 links
- cybersecuritydive.com/news/cactus-ransomware-qlik-sense-cves/714578/(opens in new tab)
- arcticwolf.com/resources/blog/qlik-sense-exploited-in-cactus-ransomware-campaign/(opens in new tab)
- shadowserver.org/what-we-do/network-reporting/critical-vulnerable-compromised-qlik-sense-special-report/(opens in new tab)
- praetorian.com/blog/qlik-sense-technical-exploit/(opens in new tab)
- praetorian.com/blog/doubleqlik-bypassing-the-original-fix-for-cve-2023-41265/(opens in new tab)