VDB
BDU%3A2015-00403
BDU%3A2015-00403
PUBLISHED
CVSS 5.800000190734863 MEDIUM
Уязвимость реализации метода getClass класса CookieInterceptor программной платформы Apache Struts, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных
Risk Scores
CVSS 2.0
5.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation, Oracle Corp., IBM Corp. | Struts, WebCenter Sites, IBM Call Center for Commerce, IBM Platform Symphony |
Timeline
- Jul 6, 2016 CVE Published
- Sep 23, 2022 CVE Updated
References
- https://www.ibm.com/support/pages/security-bulletin-ibm-platform-symphony-cve-2014-0094-cve-2014-0112-cve-2014-0113-cve-2014-0116 url
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-call-center-and-apache-struts-struts-upgrade-strategy-various-cves-see-below/ url
- https://www.oracle.com/security-alerts/cpuapr2015.html url
- https://nvd.nist.gov/vuln/detail/CVE-2014-0116 url
- https://cwiki.apache.org/confluence/display/WW/S2-022 advisory