Lucene search
RootSSV:20526HistoryMay 10, 2011 - 12:00 a.m.
VMware vCenter Orchestrator和Alive Enterprise远程代码执行漏洞
2011-05-1000:00:00
Root
www.seebug.org
20
0.054 Low
EPSS
Percentile
92.3%
CVE ID: CVE-2010-1870
VMware vCenter Orchestrator是自动管理任务的应用程序。Alive Enterprise是监管进程的应用程序。
VMware vCenter Orchestrator和Alive Enterprise在实现上存在远程代码执行漏洞，两个产品中都嵌入了第三方组件Apache Struts，此组件中的远程代码执行漏洞可允许恶意用户绕过ParametersInterceptor内的’#'-usage保护，使服务器端context对象受控。
VMWare VMware vCenter Orchestrator 4.1
VMWare VMware vCenter Orchestrator 4.0
VMWare Alive Enterprise 7.2
厂商补丁：
VMWare
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
saint
saint
Apache Struts2 XWork ParameterInterceptor security bypass
2010-08-05 00:00:00
Apache Struts2 XWork ParameterInterceptor security bypass
2010-08-05 00:00:00
Apache Struts2 XWork ParameterInterceptor security bypass
2010-08-05 00:00:00
seebug
seebug
Struts2/XWork < 2.2.0 - Remote Command Execution Vulnerability
2014-07-01 00:00:00
Struts2/XWork < 2.2.0 Remote Command Execution Vulnerability
2010-07-15 00:00:00
vmware
vmware
osv
osv
Server side object manipulation in Apache Struts
2022-05-13 01:14:26
checkpoint_advisories
checkpoint_advisories
openvas
openvas
Struts Remote Command Execution Vulnerability
2010-09-10 00:00:00
Struts Remote Command Execution Vulnerability
2010-09-10 00:00:00
Apache Struts2/XWork Remote Command Execution Vulnerability
2010-12-21 00:00:00
nessus
nessus
Apache Struts 2.x < 2.2.1 OGNL RCE (S2-005)
2018-09-10 00:00:00
Apache Struts 2 / XWork Remote Code Execution (safe check)
2010-07-29 00:00:00
exploitpack
exploitpack
Struts2XWork 2.2.0 - Remote Command Execution
2010-07-14 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_STRUTS
2010-08-17 20:00:00
packetstorm
packetstorm
Struts2/XWork Remote Command Execution
2010-07-14 00:00:00
Apache Struts < 2.2.0 Remote Command Execution
2011-08-19 00:00:00
github
github
Server side object manipulation in Apache Struts
2022-05-13 01:14:26
nuclei
nuclei
ListSERV Maestro <= 9.0-8 RCE
2021-07-01 19:14:33
cisco
cisco
Apache Struts 2 Command Execution Vulnerability in Multiple Cisco Products
2014-07-09 16:00:00
dsquare
dsquare
Apache-Struts < 2.2.0 RCE Linux
2012-01-26 00:00:00
Apache-Struts < 2.2.0 RCE Windows
2012-01-26 00:00:00
zdt
zdt
LISTSERV Maestro 9.0-8 Remote Code Execution Vulnerability
2020-10-21 00:00:00
exploitdb
exploitdb
Struts2/XWork < 2.2.0 - Remote Command Execution
2010-07-14 00:00:00
ubuntucve
ubuntucve
CVE-2010-1870
2010-08-17 00:00:00
canvas
canvas
Immunity Canvas: STRUTSCODEINJECTION
2012-01-08 15:55:00
prion
prion
Design/Logic Flaw
2010-08-17 20:00:00
cve
cve
CVE-2010-1870
2010-08-17 20:00:00
ibm
ibm
Security Bulletin: Order Management could be subject to multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x.
2024-04-12 17:35:43
wallarmlab
wallarmlab
New Struts2 Remote Code Execution exploit caught in the wild
2017-03-09 00:15:54
kitploit
kitploit
Vulmap - Web Vulnerability Scanning And Verification Tools
2020-12-25 11:30:00