PT-2016-3437 · Apache · Apache Struts

Alvaro Munoz + 1 · Published 2016-06-01 · Updated 2022-05-17 · CVE-2016-4436

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache Struts versions prior to 2.3.29 Apache Struts 2.5.x versions prior to 2.5.1

Description The issue is related to improper action name clean up, which may allow attackers to have an unspecified impact. It is also described as a vulnerability in the implementation of the action name cleanup method, associated with insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code.

Recommendations For Apache Struts versions prior to 2.3.29, update to version 2.3.29 or later. For Apache Struts 2.5.x versions prior to 2.5.1, update to version 2.5.1 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2022-06076

CVE-2016-4436

GHSA-XM92-V2MQ-842Q

Affected Products

Apache Struts

References · 17

• https://osv.dev/vulnerability/GHSA-xm92-v2mq-842q · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4436 · Security Note
• https://struts.apache.org/docs/s2-035.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4436?cpeVersion=2.2 · Security Note
• https://osv.dev/vulnerability/CVE-2016-4436 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-06076 · Security Note
• https://github.com/apache/struts · Note
• https://github.com/apache/struts/commit/27ca165ddbf81c84bafbd083b99a18d89cc49ca7 · Note
• https://github.com/apache/struts/commit/237432512df0e27013f7c7b9ab59fdce44ca34a5 · Note
• https://cwiki.apache.org/confluence/display/WW/S2-035 · Note
• https://ibm.com/support/pages/security-bulletin-multiple-vulnerabilities-apache-struts-affect-san-volume-controller-storwize-family-and-flashsystem-v9000-products · Note
• https://ibm.com/blogs/psirt/security-bulletin-ibm-call-center-and-apache-struts-struts-upgrade-strategy-various-cves-see-below · Note
• http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282 · Note
• http://oracle.com/technetwork/security-advisory/cpujul2017-3236622.html · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21987854 · Note