SUSE CVE-2014-0113

🗓️ 15 Feb 2023 05:32:46Reported by Suse CVEType

CVE-2014-0113: Struts CookieInterceptor enables remote code execution with wildcard cookiesName before 2.3.20.

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: Order Management could be subject to an Apache Struts vulnerability that could allow a remote attacker to execute arbitrary code on the system.	12 Apr 202417:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Call Center and Apache Struts Struts upgrade strategy (various CVEs, see below)	14 Sep 202217:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Platform Symphony (CVE-2014-0094, CVE-2014-0112, CVE-2014-0113, CVE-2014-0116)	18 Jun 201801:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Order Management, IBM Sterling Configure, Price, Quote and Sterling Web Channel are affected by Apache Struts 2 security vulnerabilities	11 Feb 202021:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Order Management Apache Struts upgrade strategy (various CVEs, see below)	14 Sep 202217:45	–	ibm
BDU FSTEC	The vulnerability of the implementation of the getClass method in the CookieInterceptor class of the Apache Struts software framework allows a hacker to execute arbitrary code.	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of the getClass method in the CookieInterceptor class of the Apache Struts software framework allows a hacker to gain access to read, modify, or delete data.	6 Jul 201600:00	–	bdu_fstec
Circl	CVE-2014-0113	2 May 201400:00	–	circl
Check Point Advisories	Apache Struts ParametersInterceptor ClassLoader Security Bypass (CVE-2014-0094; CVE-2014-0112; CVE-2014-0113; CVE-2014-0114)	25 Apr 201400:00	–	checkpoint_advisories
CVE	CVE-2014-0113	29 Apr 201410:00	–	cve