{"metadata": {"vulnerability": "CVE-2021-35464", "count": 104, "kinds": {"milestone": 4, "sighting": 65, "kev": 17, "other": 18}}, "data": [{"timestamp": "2021-06-23T00:00:00Z", "date_only": false, "value": "2021-06-23T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-35464", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-06-29T13:17:30Z", "date_only": false, "value": "2021-06-29T13:17:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/49", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "3abf98ef-dd8f-451d-96ad-a565d38bd70e", "content": "Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)\n\ud83d\udc64 by Michael Stepankin aka @artsploit\n\nThe story of discovering and exploiting a java deserialization vulnerability leading to RCE in ForgeRock OpenAM.\n\nPoC: GET /openam/oauth2/..;/ccversion/Version?jato.pageSession=[serialized_object]\n\n\ud83d\udcdd Contents:\n \u2022 The Story\n \u2022 Obtaining Code & Decompiling\n \u2022 Source code analysis\n \u2022 Jato\n \u2022 Testing on bug bounty (and failing)\n \u2022 Building a custom gadget chain\n \u2022 Let's get this bread\n \u2022 The patch\n \u2022 Key takeaways\n\nhttps://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464", "url": "https://t.me/ptswarm/49"}, {"timestamp": "2021-06-30T00:00:00Z", "date_only": true, "value": "2021-06-30", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-101202", "record": "CNVD-2021-101202", "field": "submitTime"}, {"timestamp": "2021-07-01T13:37:04Z", "date_only": false, "value": "2021-07-01T13:37:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/416", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "fdd71519-aa23-4ffe-a2d1-33970cf3ed37", "content": "#BugBountyTips of the Day\nWhat an awesome find and a great write-up by @artsploit on Pre-auth #RCE in ForgeRock OpenAM (CVE-2021-35464). A must-read for any #AppSec professional, #BugBounty hunter or someone trying to learn how #deserialisation attacks work:   https://t.co/3F6D9zvBtt  https://t.co/hTLF6HwuHQ", "url": "https://t.me/bhhub/416"}, {"timestamp": "2021-07-09T22:09:37Z", "date_only": false, "value": "2021-07-09T22:09:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cve_2021_35464_forgerock_openam.rb", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "c56fb0f5-16b6-4e22-a72a-4cef0510dde1", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cve_2021_35464_forgerock_openam.rb"}, {"timestamp": "2021-07-22T17:10:18Z", "date_only": false, "value": "2021-07-22T17:10:18.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-35464", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-07-22T18:15:00Z", "date_only": false, "value": "2021-07-22T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6X75-VWP5-Q242", "record": "GHSA-6X75-VWP5-Q242", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-07-22T18:15:00Z", "date_only": false, "value": "2021-07-22T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-35464", "record": "GSD-2021-35464", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-07-22T18:15:23.247Z", "date_only": false, "value": "2021-07-22T18:15:23.247", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-35464", "record": "FKIE_CVE-2021-35464", "field": "published"}, {"timestamp": "2021-07-29T23:01:39Z", "date_only": false, "value": "2021-07-29T23:01:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/37770", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "8db94ddc-7870-47cd-9ac1-93dd54abeaff", "content": "U.S. Dept Of Defense: Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)\n\nhttps://ift.tt/3rJvCww", "url": "https://t.me/ctinow/37770"}, {"timestamp": "2021-07-29T23:01:40Z", "date_only": false, "value": "2021-07-29T23:01:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/37771", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "f28cfc18-ce58-4076-bfb9-9d1789498fff", "content": "U.S. Dept Of Defense: Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)\n\nhttps://ift.tt/3f8qlsY", "url": "https://t.me/ctinow/37771"}, {"timestamp": "2021-08-02T17:00:26Z", "date_only": false, "value": "2021-08-02T17:00:26.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2021-35464", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-08-02T18:03:00Z", "date_only": false, "value": "2021-08-02T18:03Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-35464", "record": "GSD-2021-35464", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-09-21T04:42:20Z", "date_only": false, "value": "2021-09-21T04:42:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/730", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "9c8a9b54-a55a-47d0-97f7-712fef6fdb5c", "content": "CVE-2021-35464 ForgeRock OpenAM RCE\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-35464_ForgeRock_OpenAM_RCE%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/730"}, {"timestamp": "2021-10-07T17:50:52Z", "date_only": false, "value": "2021-10-07T17:50:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/rce/cve202135464", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "249cd6b5-75ef-4209-9281-677669c79e06", "url": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/rce/cve202135464"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-35464", "field": "timestamps.asserted_at", "uuid": "bdc3677f-d4ed-4ab1-894d-6cdc88fcc090", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-35464", "field": "timestamps.asserted_at", "uuid": "9e42fda4-4d0d-4639-884d-354211213216", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-35464", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-35464", "record": "GSD-2021-35464", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-35464", "field": "evidence.0.details.added_date", "uuid": "9e42fda4-4d0d-4639-884d-354211213216", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-35464", "field": "evidence.0.details.date_added", "uuid": "bdc3677f-d4ed-4ab1-894d-6cdc88fcc090", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-35464", "field": "timestamps.first_seen_at", "uuid": "bdc3677f-d4ed-4ab1-894d-6cdc88fcc090", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-35464", "field": "timestamps.first_seen_at", "uuid": "9e42fda4-4d0d-4639-884d-354211213216", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-35464", "field": "status.status_updated_at", "uuid": "bdc3677f-d4ed-4ab1-894d-6cdc88fcc090", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-35464", "field": "status.status_updated_at", "uuid": "9e42fda4-4d0d-4639-884d-354211213216", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-35464", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:17Z", "date_only": false, "value": "2021-11-08T08:58:17.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "57b8762d-550d-4eb4-8c62-9ef0e76bf58a"}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-35464", "field": "evidence.0.details.due_date", "uuid": "bdc3677f-d4ed-4ab1-894d-6cdc88fcc090", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-35464", "record": "GSD-2021-35464", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "ac138c8e-a8a0-4889-9303-4cb1365ef2ac"}, {"timestamp": "2021-12-21T00:00:00Z", "date_only": true, "value": "2021-12-21", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-101202", "record": "CNVD-2021-101202", "field": "openTime"}, {"timestamp": "2022-05-24T19:08:57Z", "date_only": false, "value": "2022-05-24T19:08:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6X75-VWP5-Q242", "record": "GHSA-6X75-VWP5-Q242", "field": "published"}, {"timestamp": "2022-12-06T16:05:07Z", "date_only": false, "value": "2022-12-06T16:05:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3791", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "f4a9f94e-9b38-429b-b9ed-39a84ca6eb19", "content": "Crowdstrike \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0438 \u0444\u0438\u0440\u043c, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0430\u0443\u0442\u0441\u043e\u0440\u0441\u0438\u043d\u0433\u043e\u043c \u0431\u0438\u0437\u043d\u0435\u0441-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u043c \u043c\u0435\u0440\u0430\u043c \u0434\u043b\u044f \u0443\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u043f\u044f\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439, \u043d\u0430\u0447\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0441 \u0438\u044e\u043d\u044f 2022 \u0433\u043e\u0434\u0430. \u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u0435 Scattered Spider.\n\n\u041a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u2014 \u0432\u0437\u043b\u043e\u043c \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 SIM-\u043a\u0430\u0440\u0442\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u0445 \u043f\u043e\u0434\u043c\u0435\u043d\u0443.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0442\u0430\u043a\u0442\u0438\u043a \u0441\u043e\u0446\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438.\n\n\u041e\u043d\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0437\u0432\u043e\u043d\u043a\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u043c \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0418\u0422-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Telegram \u0438 SMS \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u0435\u0439 \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u0441\u0430\u0439\u0442\u044b.\n\n\u0412 \u0440\u044f\u0434\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0CVE-2021-35464, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 ForgeRock AM,\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2021\u00a0\u0433\u043e\u0434\u0430, \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 AWS.\n\n\u041a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043e\u043d\u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b\u0438 \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u043e\u0431\u0445\u043e\u0434\u0430 MFA, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c.\n\nCrowdstrike \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0443\u0442\u0438\u043b\u0438\u0442 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 RMM, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a: AnyDesk, BeAnywhere, Domotz, DWservice, Fixme.it, Fleetdeck.io, Itarian Endpoint Manager, Level.io, Logmein, ManageEngine, N-Able, Pulseway, Rport, Rsocx, ScreenConnect, SSH RevShell and RDP Tunnelling via SSH, Teamviewer, TrendMicro Basecamp, Sorillus \u0438 ZeroTier.\n\n\u041c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u0432\u044b\u0448\u0435\u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c\u0438 \u0438, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u043d\u0435 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u0432 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0442\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0434\u043e\u0441\u0442\u0443\u043f \u043a VPN \u0438/\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 RMM.\n\n\u0412\u043e \u0432\u0441\u0435\u0445 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f\u0445 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 VPN \u0438 \u0442\u043e\u0447\u043a\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0440\u0435\u0434\u0435 Google Workspace \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0414\u043b\u044f \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u043b\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0442\u0438\u043f\u044b \u0440\u0430\u0437\u0432\u0435\u0434\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u0438 \u0441\u043f\u0438\u0441\u043a\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u043b\u0438 WMI, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b\u0438 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH \u0438 \u0440\u0435\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u0434\u043e\u043c\u0435\u043d\u0430.\n\nCrowdstrike \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043e\u0431\u0448\u0438\u0440\u043d\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (IoC) \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439.", "url": "https://t.me/true_secator/3791"}, {"timestamp": "2022-12-16T07:26:08Z", "date_only": false, "value": "2022-12-16T07:26:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3729", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "e25dc961-547f-4a7c-bbcd-0d25a6c16f9d", "content": "#Threat_Research\n1. An EPYC escape:\nCase-study of a KVM breakout (PoC for CVE-2021-29657)\nhttps://googleprojectzero.blogspot.com/2021/06/an-epyc-escape-case-study-of-kvm.html\n2. Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)\nhttps://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464\n]-> https://github.com/Y4er/openam-CVE-2021-35464", "url": "https://t.me/CyberSecurityTechnologies/3729"}, {"timestamp": "2023-04-27T09:58:59Z", "date_only": false, "value": "2023-04-27T09:58:59.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-35464.yaml", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "5617e67b-8c14-47ee-8aad-dd81e7d7dc3a", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-35464.yaml"}, {"timestamp": "2023-10-14T14:57:00Z", "date_only": false, "value": "2023-10-14T14:57:00+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2021-35464", "field": "timestamps.asserted_at", "uuid": "763cac32-b347-4519-9576-9f802ece33fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T14:57:00Z", "date_only": false, "value": "2023-10-14T14:57:00+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-35464", "field": "timestamps.first_seen_at", "uuid": "763cac32-b347-4519-9576-9f802ece33fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-15T19:23:35Z", "date_only": false, "value": "2023-10-15T19:23:35.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1aD0se4pHpvAWQ071J1ewz0xW9SRZEKkJBYCKa3YEF-WRfg", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "cf426ce2-4c1c-46ec-bf08-e0d7bcc01d04"}, {"timestamp": "2023-12-01T08:01:06Z", "date_only": false, "value": "2023-12-01T08:01:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/841", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "32e29118-ed72-4780-ab41-adf38c1c1f72", "content": "#ExploitObserverAlert\n\nCVE-2021-35464\n\nDESCRIPTION: Exploit Observer has 28 entries related to CVE-2021-35464. ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* request to the server. The vulnerability exists due to the usage of Sun ONE Application Framework (JATO) found in versions of Java 8 or earlier\n\nFIRST-EPSS: 0.973910000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/841"}, {"timestamp": "2023-12-13T01:23:28.091Z", "date_only": false, "value": "2023-12-13T01:23:28.091785Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-35464", "record": "GSD-2021-35464", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T00:40:45.949Z", "date_only": false, "value": "2024-08-04T00:40:45.949Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-35464", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-10T00:00:00Z", "date_only": false, "value": "2024-11-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-10)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "cd9f560e-f97d-46bc-9353-503f60242ebf"}, {"timestamp": "2024-11-14T06:09:24Z", "date_only": false, "value": "2024-11-14T06:09:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/8d14cbdd-1761-4098-8622-dee8ad1b3ce5", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "5bea2b89-9b37-4960-9ec9-5f73d04debb5"}, {"timestamp": "2024-11-29T00:00:00Z", "date_only": false, "value": "2024-11-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-29)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "79407b1b-ef0e-487e-973a-ccc7a3a59ef5"}, {"timestamp": "2024-12-24T20:24:02.731Z", "date_only": false, "value": "2024-12-24T20:24:02.731649Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971086", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "d1c86e77-8b7f-49f7-8cab-6a32be7eb6b2", "url": "https://feedsin.space/feed/CISAKevBot/items/2971086"}, {"timestamp": "2025-02-02T00:00:00Z", "date_only": false, "value": "2025-02-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-02)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "d39d7df3-abda-4260-8104-bff2ec637760"}, {"timestamp": "2025-02-04T19:41:03.395Z", "date_only": false, "value": "2025-02-04T19:41:03.395101Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-35464", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-04T19:41:03.395Z", "date_only": false, "value": "2025-02-04T19:41:03.395101Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-35464", "record": "FKIE_CVE-2021-35464", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-05T00:00:00Z", "date_only": false, "value": "2025-02-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-05)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "5771bbee-b0e3-4c82-908d-8f06a03be9e6"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "1e13c62c-d89f-4264-a74a-ff2422e2df7e"}, {"timestamp": "2025-02-23T02:09:56Z", "date_only": false, "value": "2025-02-23T02:09:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "ddc1cd5a-336d-4a7a-b152-cddf502cffef"}, {"timestamp": "2025-02-23T04:10:39Z", "date_only": false, "value": "2025-02-23T04:10:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "5514a9ad-b731-4dca-ac9f-b2f501a05aa4"}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-03)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "596c7d7f-651e-4419-8908-ca4861d2b83e"}, {"timestamp": "2025-03-20T00:00:00Z", "date_only": false, "value": "2025-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-20)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "7380b2ae-8c3b-4d5f-9986-149357a094bb"}, {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-25)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "9ad97262-4a3b-470b-83fc-f6869715f37c"}, {"timestamp": "2025-04-27T00:00:00Z", "date_only": false, "value": "2025-04-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-27)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "aec50868-ad9b-4e31-b00d-bbfb97f15c19"}, {"timestamp": "2025-05-10T00:00:00Z", "date_only": false, "value": "2025-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-10)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "6f042d3a-35ac-4e27-80c4-459845bd869a"}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-14)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "1241f95d-e94f-4d24-9c41-764383abc816"}, {"timestamp": "2025-07-24T00:00:00Z", "date_only": false, "value": "2025-07-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-24)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "40ff67b1-e559-41dc-969b-32724412ea77"}, {"timestamp": "2025-07-31T00:00:00Z", "date_only": false, "value": "2025-07-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-31)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "612fbe22-cde4-4379-9dc2-4a2a44248ad1"}, {"timestamp": "2025-08-01T00:00:00Z", "date_only": false, "value": "2025-08-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-01)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "fce80433-b967-41de-9ba9-3e604204f536"}, {"timestamp": "2025-08-01T00:00:00Z", "date_only": false, "value": "2025-08-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-01)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "365d1178-fd8a-48b1-ae1a-33e9323471fd"}, {"timestamp": "2025-08-15T00:00:00Z", "date_only": false, "value": "2025-08-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-15)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "869f0831-bd35-462d-96fd-be8f54779935"}, {"timestamp": "2025-09-15T00:00:00Z", "date_only": false, "value": "2025-09-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "f01e2b25-ac0c-4655-922d-a9ac978f446f"}, {"timestamp": "2025-09-16T00:00:00Z", "date_only": false, "value": "2025-09-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-16)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "bb7ffc86-08b1-46e2-8bc7-5b2a81fe2809"}, {"timestamp": "2025-09-26T00:00:00Z", "date_only": false, "value": "2025-09-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-26)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "61931f3e-83af-4493-9228-09803a667455"}, {"timestamp": "2025-10-15T00:00:00Z", "date_only": false, "value": "2025-10-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-15)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "f5b34e7d-56c6-43ab-ab4d-fb9918a879ad"}, {"timestamp": "2025-10-21T23:25:39.887Z", "date_only": false, "value": "2025-10-21T23:25:39.887Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-35464", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:25:39.887Z", "date_only": false, "value": "2025-10-21T23:25:39.887Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-35464", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:18Z", "date_only": false, "value": "2025-10-22T00:32:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6X75-VWP5-Q242", "record": "GHSA-6X75-VWP5-Q242", "field": "modified"}, {"timestamp": "2025-11-20T00:00:00Z", "date_only": false, "value": "2025-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-20)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "11cdf10c-b9fa-40dd-82cc-768145beb779"}, {"timestamp": "2026-01-26T00:00:00Z", "date_only": false, "value": "2026-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-26)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "b0287740-b3d0-413c-be4d-512018e74feb"}, {"timestamp": "2026-02-02T12:28:43.862Z", "date_only": false, "value": "2026-02-02T12:28:43.862916Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/66c21dac-31a1-4d9a-adbb-50968c33d311", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "36b10755-ed96-47c6-8ee9-590ba8e2dee1", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/66c21dac-31a1-4d9a-adbb-50968c33d311"}, {"timestamp": "2026-02-02T12:28:43.862Z", "date_only": false, "value": "2026-02-02T12:28:43.862916Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/66c21dac-31a1-4d9a-adbb-50968c33d311", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "608c2980-babd-43c2-991b-4af5ccd2bc2c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/66c21dac-31a1-4d9a-adbb-50968c33d311"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-35464", "field": "timestamps.recorded_at", "uuid": "bdc3677f-d4ed-4ab1-894d-6cdc88fcc090", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-04)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "45607191-c997-49c5-a045-23f3cd1ef51b"}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-05)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "8cb33316-6cfc-41d2-843d-6044e50b7f5f"}, {"timestamp": "2026-02-21T00:00:00Z", "date_only": false, "value": "2026-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-21)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "914bb780-19d0-4475-ac9d-f84066b763a9"}, {"timestamp": "2026-03-16T00:00:00Z", "date_only": false, "value": "2026-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-16)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "7da71624-50c2-43c2-a6b9-fb0f9ed8d1ea"}, {"timestamp": "2026-03-24T00:00:00Z", "date_only": false, "value": "2026-03-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-24)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "275d0aac-12ad-4520-9272-d631cd969eca"}, {"timestamp": "2026-04-08T23:35:41Z", "date_only": false, "value": "2026-04-08T23:35:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-remote-code-execution-vulnerability-openam-can-be-exploited-fully-compromise", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "b4e2fe86-3a26-4a4b-a976-318d2e9c0b54", "url": "https://ccb.belgium.be/advisories/warning-remote-code-execution-vulnerability-openam-can-be-exploited-fully-compromise"}, {"timestamp": "2026-04-13T07:31:02Z", "date_only": false, "value": "2026-04-13T07:31:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/openidentityplatform-rilevato-sfruttamento-della-cve-2026-33439", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "04e62453-35bf-426b-8d43-af5111cf7547", "url": "https://www.acn.gov.it/portale/w/openidentityplatform-rilevato-sfruttamento-della-cve-2026-33439"}, {"timestamp": "2026-05-17T00:00:00Z", "date_only": false, "value": "2026-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-17)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "f7a985b8-06e8-4cdb-8006-63f9549de4ea"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "9de916cf-c638-4f34-897f-2c863b8969eb"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": false, "value": "2026-06-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-09)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "1e1d40fd-2ba5-4740-8859-3c1507bf422c"}, {"timestamp": "2026-06-17T03:57:31.503Z", "date_only": false, "value": "2026-06-17T03:57:31.503", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-35464", "record": "FKIE_CVE-2021-35464", "field": "lastModified"}, {"timestamp": "2026-06-18T00:00:00Z", "date_only": false, "value": "2026-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-18)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "c566a234-eeb2-4d9c-ae5d-ebc9427d3ed8"}, {"timestamp": "2026-06-19T12:47:45.117Z", "date_only": false, "value": "2026-06-19T12:47:45.117766Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5fef66d5-d38d-4d91-a552-5d8ca785960d", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "ac8ebdaf-c14b-4ba7-8ec4-e48f6a432ded", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5fef66d5-d38d-4d91-a552-5d8ca785960d"}, {"timestamp": "2026-06-21T00:00:00Z", "date_only": false, "value": "2026-06-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-21)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "28d84011-a16c-44d7-b11c-ac18f60ff1e7"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-35464", "field": "timestamps.recorded_at", "uuid": "9e42fda4-4d0d-4639-884d-354211213216", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:19.457Z", "date_only": false, "value": "2026-06-23T11:13:19.457753Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9e42fda4-4d0d-4639-884d-354211213216", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "de8f0a18-ad83-45da-bd27-72a8f39b560d", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9e42fda4-4d0d-4639-884d-354211213216"}, {"timestamp": "2026-06-23T14:04:43.522Z", "date_only": false, "value": "2026-06-23T14:04:43.522455Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1bbc8c1c-efdd-4efd-ba29-f31d27b20b43", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "129912bc-81a9-4717-ba2e-787f2ad502f2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1bbc8c1c-efdd-4efd-ba29-f31d27b20b43"}, {"timestamp": "2026-06-30T09:23:39.782Z", "date_only": false, "value": "2026-06-30T09:23:39.782340Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a92a6466-e9cb-43b2-a5d6-880d3b80f0ad", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "edbec79b-6a8f-430b-9e35-82a794c49baf", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a92a6466-e9cb-43b2-a5d6-880d3b80f0ad"}, {"timestamp": "2026-07-01T05:54:39.151Z", "date_only": false, "value": "2026-07-01T05:54:39.151789Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/763cac32-b347-4519-9576-9f802ece33fd", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "e071af64-1db3-4d38-9086-39eff44ce121", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/763cac32-b347-4519-9576-9f802ece33fd"}, {"timestamp": "2026-07-25T06:15:04.623Z", "date_only": false, "value": "2026-07-25T06:15:04.623286Z", "kind": "sighting", "label": "Seen", "source": "MISP/469a09e8-cdbb-405e-b1fa-87ee37a92c1b", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "be628dce-dc90-4d8b-a812-c43a83b56d53"}, {"timestamp": "2026-07-26T00:15:02.230Z", "date_only": false, "value": "2026-07-26T00:15:02.230819Z", "kind": "sighting", "label": "Seen", "source": "MISP/469a09e8-cdbb-405e-b1fa-87ee37a92c1b", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "aeb6d301-da97-401e-8c11-34fc34021bf8"}, {"timestamp": "2026-08-28T10:00:09.315Z", "date_only": false, "value": "2026-08-28T10:00:09.315423Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "990985c7-257d-4060-b8da-93556c1e83c8"}, {"timestamp": "2026-08-28T10:15:48.081Z", "date_only": false, "value": "2026-08-28T10:15:48.081846Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-27)", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "85450109-d059-40a8-9fcf-65db3d2774bc"}, {"timestamp": "2026-09-01T17:00:46.656Z", "date_only": false, "value": "2026-09-01T17:00:46.656863Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3617", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "edec0a07-2e59-4532-b716-31c5ddde78bd", "url": "https://t.me/cissp/3617"}, {"timestamp": "2026-09-11T02:00:04.720Z", "date_only": false, "value": "2026-09-11T02:00:04.720982Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/3617", "record": "CVE-2021-35464", "field": "creation_timestamp", "uuid": "c49aa30b-f482-41bc-8889-064fdc128c91", "url": "https://t.me/cissp/3617"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2021-35464", "field": "timestamps.last_seen_at", "uuid": "763cac32-b347-4519-9576-9f802ece33fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": true, "value": "2026-10-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2021-35464", "field": "evidence.0.details.observation_date", "uuid": "763cac32-b347-4519-9576-9f802ece33fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2021-35464", "field": "status.status_updated_at", "uuid": "763cac32-b347-4519-9576-9f802ece33fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-22T01:00:02Z", "date_only": false, "value": "2026-10-22T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2021-35464", "field": "timestamps.recorded_at", "uuid": "763cac32-b347-4519-9576-9f802ece33fd", "status": {"status_reason": "confirmed", "exploited": true}}]}