VDB
BDU%3A2022-06318
BDU%3A2022-06318
PUBLISHED
CVSS 5 MEDIUM
Уязвимость реализации класса ParametersInterceptor программной платформы Apache Struts, позволяющая нарушителю оказать воздействие на целостность защищаемой информации
Risk Scores
CVSS 2.0
5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation, IBM Corp., VMware Inc., Oracle Corp. | Struts, IBM Sterling Order Management, IBM Sterling Selling and Fulfillment Foundation, IBM Sterling Field Sales, IBM Sterling Web Channel, VMware vCenter Operations Management Suite, MySQL Enterprise Monitor, IBM Call Center for Commerce, IBM Storwize V7000, IBM Storwize V5000, IBM Storwize V3700, IBM Storwize V3500, VMware vCenter Orchestrator |
Timeline
- Oct 18, 2022 CVE Published
References
- http://jvn.jp/en/jp/JVN19294237/index.html url
- https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000045.html url
- https://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html url
- http://www.securityfocus.com/archive/1/531362/100/0/threaded url
- http://www.securityfocus.com/archive/1/532549/100/0/threaded url
- http://www.securityfocus.com/bid/65999 url
- http://www.securitytracker.com/id/1029876 url
- https://www.oracle.com/security-alerts/cpuapr2015.html url
- https://www.ibm.com/support/pages/security-bulletin-ibm-sterling-order-management-ibm-sterling-configure-price-quote-and-sterling-web-channel-are-affected-apache-struts-2-security-vulnerabilities url
- https://www.vmware.com/security/advisories/VMSA-2014-0007.html url
- https://cwiki.apache.org/confluence/display/WW/S2-020 advisory
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-call-center-and-apache-struts-struts-upgrade-strategy-various-cves-see-below/ advisory
- https://www.ibm.com/support/pages/security-bulletin-security-bypass-vulnerability-san-volume-controller-and-storwize-family-cve-2014-0094-0 advisory