NVD

Id
42503  
Name
CVE-2012-0394  
Description
** DISPUTED ** The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. NOTE: the vendor characterizes this behavior as not "a security vulnerability itself."  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-01-08  
Modified Date
2014-02-20  
Seq
2012-0394  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
214140 42503 CVE-2012-0394 20120105 SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2  View
214141 42503 CVE-2012-0394 http://struts.apache.org/2.x/docs/s2-008.html  View
214142 42503 CVE-2012-0394 http://struts.apache.org/2.x/docs/version-notes-2311.html  View
214143 42503 CVE-2012-0394 18329  View
214144 42503 CVE-2012-0394 31434  View
214145 42503 CVE-2012-0394 https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt  View

Related JVN