NVD

Id
42502  
Name
CVE-2012-0393  
Description
The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-01-08  
Modified Date
2012-01-12  
Seq
2012-0393  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
214135 42502 CVE-2012-0393 20120105 SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2  View
214136 42502 CVE-2012-0393 http://struts.apache.org/2.x/docs/s2-008.html  View
214137 42502 CVE-2012-0393 http://struts.apache.org/2.x/docs/version-notes-2311.html  View
214138 42502 CVE-2012-0393 18329  View
214139 42502 CVE-2012-0393 https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25328 JVNDB-2012-001035 Apache Struts における任意のファイルを作成または上書きされる脆弱性 Apache Struts の ParameterInterceptor コンポーネントは、パブリックコンストラクタへのアクセスを適切に制限しないため、任意のファイルを作成または上書きされる脆弱性が存在します。 CVE-2012-0393 53631 CVE-2012-0393 42502 6.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001035.html 2012-01-08 2012-12-19 View