Lucene search

K
jvnJapan Vulnerability NotesJVN:72225922
HistoryApr 26, 2006 - 12:00 a.m.

JVN#72225922 Apache Struts Validator allows to bypass input data validation

2006-04-2600:00:00
Japan Vulnerability Notes
jvn.jp
9

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

87.0%

Impact

Depending on the web application, an attacker may be able to manipulate unexpected operations by bypassing validation of input data. For example, unintended format data may be saved.

Solution

Products Affected

  • Apache Struts 1.2.8 and earlier

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

87.0%