PT-2016-3437 · Apache · Apache Struts

Alvaro Munoz + 1 · Publicado 2016-06-01 · Atualizado 2022-05-17 · CVE-2016-4436

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache Struts versions prior to 2.3.29 Apache Struts 2.5.x versions prior to 2.5.1

Description The issue is related to improper action name clean up, which may allow attackers to have an unspecified impact. It is also described as a vulnerability in the implementation of the action name cleanup method, associated with insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code.

Recommendations For Apache Struts versions prior to 2.3.29, update to version 2.3.29 or later. For Apache Struts 2.5.x versions prior to 2.5.1, update to version 2.5.1 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2022-06076

CVE-2016-4436

GHSA-XM92-V2MQ-842Q

Produtos afetados

Apache Struts

Referências · 17

• https://github.com/apache/struts · Nota
• https://github.com/apache/struts/commit/27ca165ddbf81c84bafbd083b99a18d89cc49ca7 · Nota
• https://github.com/apache/struts/commit/237432512df0e27013f7c7b9ab59fdce44ca34a5 · Nota
• https://cwiki.apache.org/confluence/display/WW/S2-035 · Nota
• https://osv.dev/vulnerability/GHSA-xm92-v2mq-842q · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4436 · Nota de Segurança
• https://ibm.com/support/pages/security-bulletin-multiple-vulnerabilities-apache-struts-affect-san-volume-controller-storwize-family-and-flashsystem-v9000-products · Nota
• https://struts.apache.org/docs/s2-035.html · Aviso do Fabricante
• https://ibm.com/blogs/psirt/security-bulletin-ibm-call-center-and-apache-struts-struts-upgrade-strategy-various-cves-see-below · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-4436?cpeVersion=2.2 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-4436 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282 · Nota
• http://oracle.com/technetwork/security-advisory/cpujul2017-3236622.html · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21987854 · Nota
• http://securityfocus.com/bid/91280 · Nota