CVE

Id
53637  
CVE No.
CVE-2012-0394  
Status
Candidate  
Description
** DISPUTED ** The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. NOTE: the vendor characterizes this behavior as not "a security vulnerability itself."  
Phase
Assigned (20120108)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
565311 53637 CVE-2012-0394 BUGTRAQ:20120105 SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2  View
565312 53637 CVE-2012-0394 URL:http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html  View
565313 53637 CVE-2012-0394 EXPLOIT-DB:18329  View
565314 53637 CVE-2012-0394 URL:http://www.exploit-db.com/exploits/18329  View
565315 53637 CVE-2012-0394 EXPLOIT-DB:31434  View
565316 53637 CVE-2012-0394 URL:http://www.exploit-db.com/exploits/31434  View
565317 53637 CVE-2012-0394 MISC:http://struts.apache.org/2.x/docs/s2-008.html  View
565318 53637 CVE-2012-0394 MISC:http://struts.apache.org/2.x/docs/version-notes-2311.html  View
565319 53637 CVE-2012-0394 MISC:https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt  View
565320 53637 CVE-2012-0394 OSVDB:78276  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26143 JVNDB-2012-001850 EMC RSA enVision におけるクロスサイトスクリプティングの脆弱性 EMC RSA enVision には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-0399 53637 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001850.html  View