Lucene search
SecurityvulnsSECURITYVULNS:DOC:30528HistoryMay 02, 2014 - 12:00 a.m.
[ANN][SECURITY] ClassLoader manipulation issue confirmed for Struts 1 - CVE-2014-0114
2014-05-0200:00:00
vulners.com
149
The Apache Struts project team confirms that Struts 1 in all versions is
affected by a ClassLoader manipulation vulnerability similar to a
recently fixed vulnerability in Struts 2 (CVE-2014-0112, CVE-2014-0094) [1].
This is a different underlying flaw. For future reference, please use
CVE-2014-0114 in regards to this issue.
Struts 1 has had its End-Of-Life announcement one year ago. In a cross
project effort, the Struts team is looking for a correction or
mitigation path though. Please stay tuned for further information
regarding a solution.
This is a cross-list posting. If you have questions regarding this
report, please direct them to [email protected] only.
[1] http://struts.apache.org/release/2.3.x/docs/s2-021.html
ā Rene Gielen http://twitter.com/rgielen
Related
zdt
zdt
securityvulns
securityvulns
Apache Struts multiple security vulnerabilities
2014-05-07 00:00:00
[ANN][SECURITY] Struts 1 - CVE-2014-0114 -Mitigation Advice Available, Possible RCE Impact
2014-05-02 00:00:00
Apache commons-beanutils code exeuction
2014-06-17 00:00:00
checkpoint_advisories
checkpoint_advisories
prion
prion
Design/Logic Flaw
2014-04-29 10:37:00
Security feature bypass
2014-03-11 13:00:00
Code injection
2014-04-30 10:49:00
cve
cve
jvn
jvn
JVN#19294237: Apache Struts vulnerable to ClassLoader manipulation
2014-04-25 00:00:00
JVN#30962312: TERASOLUNA Server Framework for Java(Web) vulnerable to ClassLoader manipulation
2014-06-17 00:00:00
JVN#19118282: Seasar S2Struts vulnerable to ClassLoader manipulation
2014-07-15 00:00:00
github
github
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:16
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:15
Arbitrary code execution in Apache Commons BeanUtils
2020-06-10 23:38:01
osv
osv
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:16
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:15
Arbitrary code execution in Apache Commons BeanUtils
2020-06-10 23:38:01
ubuntucve
ubuntucve
packetstorm
packetstorm
Apache Struts ClassLoader Manipulation Remote Code Execution
2014-05-02 00:00:00
ibm
ibm
Security Bulletin: The IBM FlashSystem V840 product model numbers AC0 and AC1 nodes are affected by vulnerabilities in Apacheās Struts library
2018-06-18 00:08:33
vmware
vmware
threatpost
threatpost
VMware Patches Apache Struts Flaws in vCOPS
2014-06-25 13:59:49
nessus
nessus
VMware vCenter Operations Management Suite Multiple Vulnerabilities (VMSA-2014-0007)
2014-07-07 00:00:00
MySQL Enterprise Monitor < 2.3.17 Multiple Vulnerabilities
2015-05-08 00:00:00
MySQL Enterprise Monitor 3.0.x < 3.0.11 Multiple Vulnerabilities
2015-05-08 00:00:00
f5
f5
SOL15261 - Apache Struts vulnerability CVE-2014-0112
2014-05-15 00:00:00
SOL15262 - Apache Struts vulnerability CVE-2014-0113
2014-05-15 00:00:00
SOL15260 - Apache Struts vulnerability CVE-2014-0094
2014-05-15 00:00:00
cert
cert
seebug
seebug
Apache Struts ClassLoaderęä½ę¼ę“
2014-03-10 00:00:00
hackerone
hackerone
U.S. Dept Of Defense: Remote code execution vulnerability on a DoD website
2016-12-19 23:00:16
fedora
fedora
[SECURITY] Fedora 20 Update: struts-1.3.10-10.fc20
2014-08-23 02:00:36
suse
suse
Security update for struts (important)
2014-07-16 01:10:20
redhat
redhat
(RHSA-2014:0498) Important: Fuse ESB Enterprise 7.1.0 security update
2014-05-14 00:00:00
(RHSA-2014:0500) Important: struts security update
2014-05-14 00:00:00
(RHSA-2014:0474) Important: struts security update
2014-05-07 00:00:00
openvas
openvas
Oracle Linux Local Check: ELSA-2014-0474
2015-10-06 00:00:00
RedHat Update for struts RHSA-2014:0474-01
2014-05-12 00:00:00
Debian Security Advisory DSA 2940-1 (libstruts1.2-java - security update)
2014-08-21 00:00:00
mageia
mageia
Updated struts packages fix CVE-2014-0114
2014-05-15 02:13:20
debian
debian
[SECURITY] [DSA 2940-1] libstruts1.2-java security update
2014-08-21 06:39:48
[SECURITY] [DLA 57-1] libstruts1.2-java security update
2014-09-17 12:59:07
oraclelinux
oraclelinux
struts security update
2014-05-06 00:00:00
apache-commons-beanutils security update
2020-01-22 00:00:00
centos
centos
struts security update
2014-05-07 14:04:43
gentoo
gentoo
Commons-BeanUtils: Arbitrary code execution
2016-07-20 00:00:00
debiancve
debiancve
CVE-2014-0114
2014-04-30 10:49:00
veracode
veracode
Class Loader Manipulation With CookieInterceptor
2014-06-06 18:13:23
ubuntu
ubuntu
Apache Commons BeanUtils vulnerabilities
2021-03-15 00:00:00
redhatcve
redhatcve
CVE-2019-3834
2019-10-02 20:20:56
huawei
huawei
Security Advisory-Apache Struts2 vulnerability on Huawei multiple products
2014-07-07 00:00:00
rapid7blog
rapid7blog
Spring4Shell: Zero-Day Vulnerability in Spring Framework (CVE-2022-22965)
2022-03-30 22:33:54
Related for SECURITYVULNS:DOC:30528