VDB
BDU%3A2022-06343
BDU%3A2022-06343
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Уязвимость реализации класса CookieInterceptor программной платформы Apache Struts, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
6.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| IBM Corp., Apache Software Foundation | IBM Call Center for Commerce, Struts |
Timeline
- Oct 20, 2022 CVE Published
References
- https://cwiki.apache.org/confluence/display/WW/S2-008 url
- https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.11 url
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-call-center-and-apache-struts-struts-upgrade-strategy-various-cves-see-below/ url
- https://www.exploit-db.com/exploits/18329 url
- https://lists.immunityinc.com/pipermail/dailydave/2012-January/000011.html url
- http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html url
- https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt url
- https://access.redhat.com/security/cve/cve-2012-0392 url