Test Kennung:	1.3.6.1.4.1.25623.1.0.809475
Kategorie:	Web application abuses
Titel:	Apache Struts Unspecified Vulnerability (S2-035) - Linux
Zusammenfassung:	Apache Struts is prone to an unspecified; vulnerability.;; This VT has been merged into the VT 'Apache Struts Unspecified Vulnerability (S2-035)'; (OID: 1.3.6.1.4.1.25623.1.0.809474).
Beschreibung:	Summary: Apache Struts is prone to an unspecified vulnerability. This VT has been merged into the VT 'Apache Struts Unspecified Vulnerability (S2-035)' (OID: 1.3.6.1.4.1.25623.1.0.809474). Vulnerability Insight: The flaw exists due to the method used to clean up action name can produce vulnerable payload based on crafted input. Vulnerability Impact: Successful exploitation will allow attacker to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks. Affected Software/OS: Apache Struts 2.x through 2.3.29 and 2.5.0. Solution: Update to version 2.3.29, 2.5.1 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	BugTraq ID: 91280 Common Vulnerability Exposure (CVE) ID: CVE-2016-4436 http://www.securityfocus.com/bid/91280
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.