Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-5638
HistoryMar 11, 2017 - 2:59 a.m.

CVE-2017-5638

2017-03-1102:59:00
CWE-755
[email protected]
web.nvd.nist.gov
1373
In Wild
8
21
cve-2017-5638
jakarta multipart parser
apache struts 2
remote code execution
security vulnerability
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.966

Percentile

99.7%

JSON

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.

Affected configurations

NVD
Node
apachestrutsRange2.2.3–2.3.32
OR
apachestrutsRange2.5.0–2.5.10.1
Node
ibmstorwize_v3500_firmwareMatch7.7.1.6
OR
ibmstorwize_v3500_firmwareMatch7.8.1.0
AND
ibmstorwize_v3500Match-
Node
ibmstorwize_v5000_firmwareMatch7.7.1.6
OR
ibmstorwize_v5000_firmwareMatch7.8.1.0
AND
ibmstorwize_v5000Match-
Node
ibmstorwize_v7000_firmwareMatch7.7.1.6
OR
ibmstorwize_v7000_firmwareMatch7.8.1.0
AND
ibmstorwize_v7000Match-
Node
lenovostorage_v5030_firmwareMatch7.7.1.6
OR
lenovostorage_v5030_firmwareMatch7.8.1.0
AND
lenovostorage_v5030Match-
Node
hpserver_automationMatch9.1.0
OR
hpserver_automationMatch10.0.0
OR
hpserver_automationMatch10.1.0
OR
hpserver_automationMatch10.2.0
OR
hpserver_automationMatch10.5.0
Node
oracleweblogic_serverMatch10.3.6.0.0
OR
oracleweblogic_serverMatch12.1.3.0.0
OR
oracleweblogic_serverMatch12.2.1.1.0
OR
oracleweblogic_serverMatch12.2.1.2.0
Node
arubanetworksclearpass_policy_managerRange<6.6.5
Node
netapponcommand_balanceMatch-

CNA Affected

[
  {
    "product": "Apache Struts",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "2.3.x before 2.3.32"
      },
      {
        "status": "affected",
        "version": "2.5.x before 2.5.10.1"
      }
    ]
  }
]

References

Social References

More

Related

packetstorm 2
myhack58 8
trendmicroblog 3
seebug 2
cisa_kev 1
cisco 1
ibm 10
securelist 1
openvas 14
nessus 9
vmware 2
thn 10
atlassian 4
hackerone 3
krebs 1
lenovo 2
qualysblog 6
kitploit 10
threatpost 18
saint 3
osv 2
f5 1
canvas 1
malwarebytes 1
cvelist 1
nvd 1
cert 1
cloudfoundry 1
zdt 2
checkpoint_advisories 2
huawei 1
github 3
veracode 1
nuclei 1
impervablog 9
rapid7community 1
attackerkb 2
redhatcve 1
ubuntucve 1
prion 1
talosblog 4
pentestit 2
nmap 1
ics 1
oracle 2
packetstorm
packetstorm
Apache Struts Jakarta Multipart Parser OGNL Injection
2017-03-14 00:00:00
Apache Struts 2 2.3.x / 2.5.x Remote Code Execution
2017-03-10 00:00:00
myhack58
myhack58
The Struts S2-045 vulnerability heat analysis-vulnerability warning-the black bar safety net
2017-03-16 00:00:00
About Apache Struts2（S2-045）vulnerability briefings-vulnerability warning-the black bar safety net
2017-03-07 00:00:00
Burrow experience | to see how I find the Yahoo remote code execution vulnerability and get the 5500 knife bonus-vulnerability warning-the black bar safety net
2017-06-07 00:00:00
trendmicroblog
trendmicroblog
Linux is secure…right?
2017-06-15 19:00:13
Sound, Fury, And Nothing One Year After Equifax
2018-09-07 12:00:34
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of September 11, 2017
2017-09-15 14:59:53
seebug
seebug
S2-046: Struts 2 Remote Code Execution vulnerability（CVE-2017-5638）
2017-03-21 00:00:00
S2-045: Struts 2 Remote Code Execution vulnerability（CVE-2017-5638）
2017-03-06 00:00:00
cisa_kev
cisa_kev
Apache Struts Remote Code Execution Vulnerability
2021-11-03 00:00:00
cisco
cisco
Apache Struts2 Jakarta Multipart Parser File Upload Code Execution Vulnerability Affecting Cisco Products
2017-03-10 19:30:00
ibm
ibm
Security Bulletin:Vulnerability in Apache Struts affects Storwize V7000 Unified (CVE-2017-5638)
2018-06-18 00:34:31
Security Bulletin: Vulnerability in Apache Struts affects SAN Volume Controller, Storwize family and FlashSystem V9000 products (CVE-2017-5638)
2023-03-29 01:48:02
Security Bulletin: IBM Sterling Order Management is affected by a vulnerability (CVE-2017-5638)
2018-06-16 20:09:19
securelist
securelist
Unveiling NKAbuse: a new multiplatform threat abusing the NKN protocol
2023-12-14 13:00:40
openvas
openvas
Cisco Identity Services Engine Apache Struts2 Jakarta Multipart Parser File Upload Code Execution Vulnerability
2017-03-13 00:00:00
Apache Struts Security Update (S2-045, S2-046) - Version Check
2021-04-06 00:00:00
Cisco Unified Communications Manager Apache Struts2 Jakarta Multipart Parser File Upload Code Execution Vulnerability (cisco-sa-20170310-struts2)
2017-03-14 00:00:00
nessus
nessus
Apache Struts 2 RCE (CVE-2017-5638) (deprecated)
2017-04-12 00:00:00
Apache Struts 2.3.5 - 2.3.31 / 2.5.x < 2.5.10.1 Jakarta Multipart Parser RCE (S2-045) (S2-046)
2017-03-07 00:00:00
Apache Struts 2.3.5 - 2.3.31 / 2.5.x < 2.5.10.1 Jakarta Multipart Parser RCE (remote)
2017-03-08 00:00:00
vmware
vmware
VMware product updates resolve remote code execution vulnerability via Apache Struts 2
2017-03-13 00:00:00
VMware product updates resolve remote code execution vulnerability via Apache Struts 2
2017-03-13 00:00:00
thn
thn
New Apache Struts Zero-Day Vulnerability Being Exploited in the Wild
2017-03-09 01:03:00
UK Regulator Fines Equifax £500,000 Over 2017 Data Breach
2018-09-20 13:54:00
Whoops, Turns Out 2.5 Million More Americans Were Affected By Equifax Breach
2017-10-02 21:23:00
atlassian
atlassian
Apache Struts 2 Remote Code Execution (CVE-2017-5638)
2017-03-10 04:31:09
Apache Struts 2 Remote Code Execution (CVE-2017-5638)
2017-03-10 04:57:51
Apache Struts 2 Remote Code Execution (CVE-2017-5638)
2017-03-10 04:57:51
hackerone
hackerone
U.S. Dept Of Defense: Remote Code Execution (RCE) in a DoD website
2017-03-13 13:22:29
U.S. Dept Of Defense: Remote code execution vulnerability on a DoD website
2017-03-13 04:14:12
U.S. Dept Of Defense: Remote Code Execution (RCE) in a DoD website
2017-03-09 17:59:08
krebs
krebs
Equifax Hackers Stole 200k Credit Card Accounts in One Fell Swoop
2017-09-14 18:03:12
lenovo
lenovo
Apache Struts Open Source Framework Remote Code Execution - us
2017-06-09 00:00:00
Apache Struts Open Source Framework Remote Code Execution - Lenovo Support US
2017-06-09 00:00:00
qualysblog
qualysblog
The Sky Is Falling! Responding Rationally to Headline Vulnerabilities
2018-04-19 23:00:03
How To Prioritize Vulnerabilities in a Modern IT Environment
2018-05-07 16:00:10
Cryptomining is all the rage among hackers, as DDoS amplification attacks continue
2018-03-09 21:45:09
kitploit
kitploit
struts-pwn - An exploit for Apache Struts CVE-2017-5638
2017-03-14 13:34:00
strutszeiro - Telegram Bot to manage botnets created with struts vulnerability (CVE-2017-5638)
2017-03-14 17:30:00
Struts2Shell - Interactive Shell Command to Exploit Apache Struts CVE-2017-5638
2017-03-17 14:22:00
threatpost
threatpost
Equifax Says 2.4 Million More People Impacted By Massive 2017 Breach
2018-03-02 15:12:57
Attacks Heating Up Against Apache Struts 2 Vulnerability
2017-03-09 12:25:46
Equifax to Pay $700 Million in 2017 Data Breach Settlement
2019-07-22 14:31:39
saint
saint
Apache Struts 2 Jakarta Multipart Parser file upload command execution
2017-03-16 00:00:00
Apache Struts 2 Jakarta Multipart Parser file upload command execution
2017-03-16 00:00:00
Apache Struts 2 Jakarta Multipart Parser file upload command execution
2017-03-16 00:00:00
osv
osv
CVE-2017-5638
2017-03-11 02:59:00
Apache Struts vulnerable to remote arbitrary command execution due to improper input validation
2018-10-18 19:24:26
f5
f5
K43451236 : Apache Struts 2 vulnerability CVE-2017-5638
2017-03-09 00:00:00
canvas
canvas
Immunity Canvas: STRUTS_OGNL
2017-03-11 02:59:00
malwarebytes
malwarebytes
Equifax breach: What you need to know [updated]
2017-09-08 07:02:47
cvelist
cvelist
CVE-2017-5638
2017-03-11 02:11:00
nvd
nvd
CVE-2017-5638
2017-03-11 02:59:00
cert
cert
Apache Struts 2 is vulnerable to remote code execution
2017-03-14 00:00:00
cloudfoundry
cloudfoundry
CVE-2017-5638: Apache Struts Remote Code Execution | Cloud Foundry
2017-03-14 00:00:00
zdt
zdt
Apache Struts Jakarta Multipart Parser OGNL Injection Exploit
2017-03-15 00:00:00
Apache Struts 2 2.3.x / 2.5.x Remote Code Execution Exploit
2017-03-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Struts 2 Content-Disposition Remote Code Execution (CVE-2017-5638)
2017-08-09 00:00:00
Apache Struts2 Content-Type Remote Code Execution (CVE-2017-5638)
2017-03-07 00:00:00
huawei
huawei
Security Advisory - Apache Struts2 Remote Code Execution Vulnerability in Huawei Products
2017-03-16 00:00:00
github
github
Apache Struts vulnerable to remote arbitrary command execution due to improper input validation
2018-10-18 19:24:26
The GitHub Security Lab’s journey to disclosing 500 CVEs in open source projects
2023-09-21 20:56:46
Bypassing OGNL sandboxes for fun and charities
2023-01-27 16:00:49
veracode
veracode
Remote Code Execution (RCE) Through Jakarta Multipart Parser
2017-03-09 12:39:55
nuclei
nuclei
Apache Struts 2 - Remote Command Execution
2020-08-19 13:13:31
impervablog
impervablog
Keeping Your WAF Relevant: Emergency Feed Pushes New Mitigations in Just Hours
2018-04-26 19:01:59
Two New Trends Make Early Breach Detection and Prevention a Security Imperative
2022-08-31 13:47:34
CVE-2017-9791: Analysis of RCE in the Struts Showcase App in Struts 1 Plugin
2017-07-13 19:12:31
rapid7community
rapid7community
Apache Struts Vulnerability (CVE-2017-5638) Exploit Traffic
2017-03-15 14:29:55
attackerkb
attackerkb
CVE-2017-5638
2017-03-11 00:00:00
CVE-2019-0230
2020-09-14 00:00:00
redhatcve
redhatcve
CVE-2017-5638
2017-03-08 11:53:37
ubuntucve
ubuntucve
CVE-2017-5638
2017-03-11 00:00:00
prion
prion
Design/Logic Flaw
2017-03-11 02:59:00
talosblog
talosblog
Another Apache Struts Vulnerability Under Active Exploitation
2017-09-07 15:42:00
2017 in Snort Signatures.
2018-01-29 11:37:00
Cryptocurrency miners aren’t dead yet: Documenting the voracious but simple “Panda”
2019-09-17 08:09:45
pentestit
pentestit
UPDATE: Infection Monkey 1.6.1
2018-12-03 22:28:53
JexBoss: Java Deserialization Verification & EXploitation Tool!
2017-08-11 06:52:45
nmap
nmap
http-vuln-cve2017-5638 NSE Script
2017-03-10 17:53:45
ics
ics
Top 10 Routinely Exploited Vulnerabilities
2020-05-12 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2017
2018-03-20 00:00:00
Oracle Critical Patch Update Advisory - April 2017
2017-04-18 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.966

Percentile

99.7%

JSON
Related for CVE-2017-5638
packetstorm2myhack588trendmicroblog3seebug2cisa_kev1cisco1ibm10securelist1openvas14nessus9vmware2thn10atlassian4hackerone3krebs1lenovo2qualysblog6kitploit10threatpost18saint3osv2f51canvas1malwarebytes1cvelist1nvd1cert1cloudfoundry1zdt2checkpoint_advisories2huawei1github3veracode1nuclei1impervablog9rapid7community1attackerkb2redhatcve1ubuntucve1prion1talosblog4pentestit2nmap1ics1oracle2