NVD

Id
13142  
Name
CVE-2010-1622  
Description
SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-06-21  
Modified Date
2016-12-06  
Seq
2010-1622  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
72521 13142 CVE-2010-1622 http://geronimo.apache.org/2010/07/21/apache-geronimo-v216-released.html  View
72522 13142 CVE-2010-1622 http://geronimo.apache.org/21x-security-report.html  View
72523 13142 CVE-2010-1622 http://geronimo.apache.org/22x-security-report.html  View
72524 13142 CVE-2010-1622 13918  View
72525 13142 CVE-2010-1622 http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html  View
72526 13142 CVE-2010-1622 RHSA-2011:0175  View
72527 13142 CVE-2010-1622 20100618 CVE-2010-1622: Spring Framework execution of arbitrary code  View
72528 13142 CVE-2010-1622 40954  View
72529 13142 CVE-2010-1622 1033898  View
72530 13142 CVE-2010-1622 http://www.springsource.com/security/cve-2010-1622  View
72531 13142 CVE-2010-1622 ADV-2011-0237  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39654 JVNDB-2010-005439 SpringSource Spring Framework における任意のコードを実行される脆弱性 SpringSource Spring Framework には、任意のコードを実行される脆弱性が存在します。 CVE-2010-1622 44202 CVE-2010-1622 13142 5.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005439.html 2010-06-17 2015-10-22 View