Lucene search
CiscoCISCO-SA-STRUTS-C2KCMKMTHistoryDec 12, 2023 - 4:00 p.m.
Apache Struts Vulnerability Affecting Cisco Products: December 2023
2023-12-1216:00:00
tools.cisco.com
21
apache
struts
vulnerability
december
2023
remote code execution
file upload
cisco
security advisory
On December 7, 2023, the following vulnerability in Apache Struts was disclosed:
CVE-2023-50164: An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution.
For a description of this vulnerability, see the Apache Software Foundation Security Bulletin [“https://cwiki.apache.org/confluence/display/WW/S2-066”].
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-struts-C2kCMkmT [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-struts-C2kCMkmT”]
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco identity services engine software | eq | any | |
| cisco identity services engine software | eq | any |
Related
qualysblog
qualysblog
Detect and Manage the Risk of Apache Struts (CVE-2023-50164) Comprehensively
2024-01-12 22:44:26
Announcing TotalCloud™ 2.0 with TruRisk™ Insights: The Future of Cloud and SaaS Security
2024-02-07 13:55:00
Yet Another Apache Struts 2 Vulnerability – CVE-2023-50164
2023-12-26 14:06:14
hivepro
hivepro
Critical Remote Code Execution Flaw Uncovered in Apache Struts 2
2023-12-15 06:56:04
githubexploit
githubexploit
cve
cve
CVE-2023-50164
2023-12-07 09:15:07
srcincite
srcincite
ibm
ibm
cnvd
cnvd
Apache Struts Directory Traversal Vulnerability
2023-12-12 00:00:00
malwarebytes
malwarebytes
Recently-patched Apache Struts vulnerability used in worldwide attacks
2023-12-14 21:35:04
Microsoft patches 34 vulnerabilities, including one zero-day
2023-12-13 16:39:23
akamaiblog
akamaiblog
nessus
nessus
Cisco Identity Services Engine RCE (cisco-sa-struts-C2kCMkmT)
2023-12-21 00:00:00
f5
f5
K000137931 : Apache Struts vulnerability CVE-2023-50164
2023-12-15 00:00:00
osv
osv
CVE-2023-50164
2023-12-07 09:15:07
Apache Struts vulnerable to path traversal
2023-12-07 09:30:45
openvas
openvas
Apache Struts Security Update (S2-066)
2023-12-08 00:00:00
adobe
adobe
APSB23-77 : Security update available for Adobe Experience Manager Forms
2023-12-15 00:00:00
saint
saint
Apache Struts file upload directory traversal
2023-12-20 00:00:00
Apache Struts file upload directory traversal
2023-12-20 00:00:00
github
github
Apache Struts vulnerable to path traversal
2023-12-07 09:30:45
veracode
veracode
Remote Code Execution (RCE)
2023-12-14 16:09:57
ubuntucve
ubuntucve
CVE-2023-50164
2023-12-07 00:00:00
trendmicroblog
trendmicroblog
Decoding CVE-2023-50164: Unveiling the Apache Struts File Upload Exploit
2023-12-15 00:00:00
prion
prion
Design/Logic Flaw
2023-12-07 09:15:00
redhatcve
redhatcve
CVE-2023-50164
2023-12-11 06:27:16
impervablog
impervablog
CVE-2023-50164: A Critical Vulnerability in Apache Struts
2023-12-19 12:34:31
thn
thn
New Critical RCE Vulnerability Discovered in Apache Struts 2 - Patch Now
2023-12-12 05:23:00
avleonov
avleonov
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00