Lucene search
Ubuntu.comUB:CVE-2012-0392HistoryJan 08, 2012 - 12:00 a.m.
CVE-2012-0392
2012-01-0800:00:00
ubuntu.com
ubuntu.com
12
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.955 High
EPSS
Percentile
99.4%
The CookieInterceptor component in Apache Struts before 2.3.1.1 does not
use the parameter-name whitelist, which allows remote attackers to execute
arbitrary commands via a crafted HTTP Cookie header that triggers Java code
execution through a static method.
Related
osv
osv
github
github
nuclei
nuclei
Apache Struts2 S2-008 RCE
2021-02-21 13:59:42
checkpoint_advisories
checkpoint_advisories
Apache Struts 2 CookieInterceptor OGNL Script Injection (CVE-2012-0392)
2012-06-25 00:00:00
f5
f5
K13434228 : Apache Struts vulnerability CVE-2012-0392
2020-12-11 00:00:00
prion
prion
Security feature bypass
2012-01-08 15:55:00
nessus
nessus
cve
cve
CVE-2012-0392
2012-01-08 15:55:00
openvas
openvas
Apache Struts Security Update (S2-008)
2021-09-14 00:00:00
ibm
ibm
Security Bulletin: Order Management could be subject to an Apache Struts vulnerability that could allow a remote attacker to execute arbitrary code on the system.
2024-04-12 17:44:56
vmware
vmware
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.955 High
EPSS
Percentile
99.4%
Related for UB:CVE-2012-0392