VDB
BDU%3A2015-00401
BDU%3A2015-00401
PUBLISHED
CVSS 7.5 HIGH
Уязвимость реализации метода getClass класса CookieInterceptor программной платформы Apache Struts, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation, Oracle Corp., IBM Corp. | Struts, WebCenter Sites, IBM Call Center for Commerce |
Timeline
- Jul 6, 2016 CVE Published
- Sep 21, 2022 CVE Updated
References
- https://www.oracle.com/security-alerts/cpuapr2015.html advisory
- https://cwiki.apache.org/confluence/display/WW/S2-021 advisory
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-call-center-and-apache-struts-struts-upgrade-strategy-various-cves-see-below/ advisory
- https://nvd.nist.gov/vuln/detail/CVE-2014-0113 url