Apache Struts2 'XWork' Information Disclosure Vulnerability

This host is running Apache Struts and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbapachestrutsxworkinfodiscvuln.nasl 5497 2017-03-06 10:23:23Z teissa $ Apache Struts2 'XWork' Information Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright c...

Apache Struts 2, XWork, OpenSymphony WebWork Java Class Path Information Disclosure

Security Advisory: MVSA-11-007 http://www.ventuneac.net/security-advisories/MVSA-11-007 CVE: CVE-2011-2088 Vendors: Apache Software Foundation, OpenSymphony Products: Struts 2, XWork , WebWork Vulnerabilities: Java Class Path Information Disclosure Risk: Medium Attack Vector: From Remote...

CVE-2011-2088

CVE-2011-2088 affects XWork (Apache Struts 2.2.1 / OpenSymphony XWork) where XWork-generated error pages could reveal internal Java class path information via an s:submit element and a nonexistent method. This is tied to the CVE-2011-1772 family and is described as a separate vulnerability relate...