CVE 2021-20090

Hi Maroun Moussallem ,

Thank you for reaching out to the community, the message alert under the ips.log 

server-webapp: Offers detection and blocking for vulnerabilities that affect Web-based applications.

Can you please share the screenshot or logs here ? You can ensure for a full endpoint scan on the computer which is at risk. 

hello Vivek Jagad ,

thank you for the follow up,

regards,

Attacker 192.168.10.102 must be generating the malicious traffic, have you completed a full scan on that client's machine ?

thanks for the quick reply,

yes, I did.

also, I asked the user what he was doing during at that time, or if he visited any particular website. everything seemed okay.

is there anythg that I have to do?

There was only one hit it seems, have you noted any more similar events generating from that source ?

no events appeared after that single hit.

Great, looks like it is stopped Maroun now after the full scan...

thank you vivek