Apache Struts Security Bypass Vulnerability (CNVD-2016-01256)

🗓️ 23 Feb 2016 00:00:00Reported by China National Vulnerability DatabaseType

Apache Struts security bypass via top objects to access internals and perform unauthorized actions.

Reporter	Title	Published	Views	Family All 21
IBM Security Bulletins	Security Bulletin: Order Management could be subject to an Apache Struts vulnerability that could allow a remote attacker to execute arbitrary code on the system.	12 Apr 202417:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Call Center and Apache Struts Struts upgrade strategy (various CVEs, see below)	14 Sep 202217:37	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Struts affects the IBM FlashSystem model V9000 (CVE-2015-5209)	18 Jun 201800:10	–	ibm
IBM Security Bulletins	Security Bulletin:A vulnerability in Struts affects the IBM FlashSystem model V840 (CVE-2015-5209)	18 Jun 201800:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Struts affects IBM SAN Volume Controller and Storwize Family (CVE-2015-5209)	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Order Management Apache Struts upgrade strategy (various CVEs, see below)	14 Sep 202217:45	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Struts affects the IBM FlashSystem models 840 and 900 (CVE-2015-5209)	18 Feb 202301:45	–	ibm
BDU FSTEC	The vulnerability of the ValueStack interface implementation in the Apache Struts software platform allows a attacker to gain access to read, modify, or delete data.	30 Sep 202200:00	–	bdu_fstec
CVE	CVE-2015-5209	29 Aug 201715:00	–	cve
Cvelist	CVE-2015-5209	29 Aug 201715:00	–	cvelist