Lucene search

K
nvd[email protected]NVD:CVE-2015-0899
HistoryJul 04, 2016 - 10:59 p.m.

CVE-2015-0899

2016-07-0422:59:00
CWE-20
web.nvd.nist.gov

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.4

Confidence

High

EPSS

0.949

Percentile

99.3%

The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter.

Affected configurations

NVD
Node
apachestrutsMatch1.0
OR
apachestrutsMatch1.0.2
OR
apachestrutsMatch1.1
OR
apachestrutsMatch1.1b1
OR
apachestrutsMatch1.1b2
OR
apachestrutsMatch1.1b3
OR
apachestrutsMatch1.1rc1
OR
apachestrutsMatch1.1rc2
OR
apachestrutsMatch1.2.2
OR
apachestrutsMatch1.2.4
OR
apachestrutsMatch1.2.6
OR
apachestrutsMatch1.2.7
OR
apachestrutsMatch1.2.8
OR
apachestrutsMatch1.2.9
OR
apachestrutsMatch1.3.5
OR
apachestrutsMatch1.3.8
OR
apachestrutsMatch1.3.10

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.4

Confidence

High

EPSS

0.949

Percentile

99.3%