N/A

CVSS Score

Basic Information

CVE ID

GHSA ID

GHSA-g86j-hwg9-77q5

EPSS Score

CWE

Published

12/27/2022

Updated

1/12/2023

KEV Status

Technology

Python

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-g86j-hwg9-77q5

GHSA-g86j-hwg9-77q5: SentinelOne impersonated via PyPI packages

In December 2022, threat actors impersonated SentinelOne by uploading fake software development kits (SDKs) onto PyPI. The SDKs contain fully functional SentinelOne clients, but the packages also contained malicious backdoors that are only executed when called on programmatically, as opposed to during installation. The packages have since been taken down from PyPI.

(GitHub Advisory)

N/A

CVSS Score

Basic Information

CVE ID

GHSA ID

GHSA-g86j-hwg9-77q5

EPSS Score

CWE

Published

12/27/2022

Updated

1/12/2023

KEV Status

Technology

Python

Technical Details

CVSS Vector

Package Name	Ecosystem	Vulnerable Versions
SentinelOne	pip	>= 1.0.0, <= 1.2.1
sentinelone-sdk	pip	>= 6.2.1, <= 6.2.2
SentineloneSDK	pip	= 1.0.0
Sentinelone	pip	= 1.0.0

Vulnerability Intelligence
Miggo AI

Root Cause Analysis:

In progress

WAF Protection Rules

WAF Rule

In ****m**r ****, t*r**t **tors imp*rson*t** S*ntin*lOn* *y uplo**in* **k* so*tw*r* **v*lopm*nt kits (S*Ks) onto PyPI. T** S*Ks *ont*in *ully *un*tion*l S*ntin*lOn* *li*nts, *ut t** p**k***s *lso *ont*in** m*li*ious ***k*oors t**t *r* only *x**ut** w

Reasoning

No *n*lysis *v*il**l*

N/A

Basic Information

Concerned about an active attack path?

GHSA-g86j-hwg9-77q5: SentinelOne impersonated via PyPI packages

N/A

Basic Information

Technical Details

Vulnerability IntelligenceMiggo AI

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability Intelligence
Miggo AI