PT-2017-6442 · Apache · Apache Roller

Gregory Draperi · Publicado 2017-07-14 · Atualizado 2017-07-27 · CVE-2015-0249

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache Roller versions 5.1 through 5.1.1

Description The issue allows remote authenticated users with admin privileges for a weblog to execute arbitrary Java code via crafted Velocity Text Language (VTL) in the weblog page template.

Recommendations For Apache Roller versions 5.1 through 5.1.1, consider restricting access to the weblog page template to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the use of Velocity Text Language (VTL) in the weblog page template to prevent the execution of arbitrary Java code.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2015-0249

Produtos afetados

Apache Roller

Referências · 4

• https://mail-archives.apache.org/mod_mbox/roller-user/201503.mbox/%3CCAF1aazAPWTduVhrPr7WiFaspFdsh21yf0YiSB3UmLjtDVGnfXw%40mail.gmail.com%3E · Nota
• http://cve.killedkenny.io/cve/CVE-2015-0249 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-0249 · Nota de Segurança
• http://openwall.com/lists/oss-security/2015/03/30/13 · Nota