PHP2Shell flaws reach IBM i web servers; patched PHP builds are out
Two critical PHP flaws let a single unauthenticated HTTP request run code on PHP 5.4 through 8.5, and the IBM i PHP distributions shipped fixes from October 21, including for some end-of-life releases. Inventory every PHP instance on the box, patch it from its distribution this week, and treat any web-facing PHP job as a door that may already be open: check its logs and the IFS for changes.
Built In.
The best of the log, every two weeks. One idea, one proof, one next step.
Built In.
The best of the log, every two weeks. One idea, one proof, one next step.
References do not imply endorsement. The link goes to the original source; the words are ours. Silver Lake Financial Group and Alder & Pine Home, where mentioned, are fictitious demonstration companies.