VDB
BDU%3A2022-06076
BDU%3A2022-06076
PUBLISHED
CVSS 10 CRITICAL
Уязвимость реализации метода очистки имени действия программной платформы Apache Struts, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation, IBM Corp. | Struts, IBM Call Center for Commerce, IBM SAN Volume Controller, IBM Storwize V3500, IBM Storwize V3700, IBM Storwize V5000, IBM Storwize V7000, IBM FlashSystem V9000 |
Timeline
- Oct 4, 2022 CVE Published
References
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-call-center-and-apache-struts-struts-upgrade-strategy-various-cves-see-below/ url
- https://www.ibm.com/support/pages/security-bulletin-multiple-vulnerabilities-apache-struts-affect-san-volume-controller-storwize-family-and-flashsystem-v9000-products url
- https://cwiki.apache.org/confluence/display/WW/S2-035 url
- https://nvd.nist.gov/vuln/detail/CVE-2016-4436?cpeVersion=2.2 url