fkie_cve-2015-0899
Vulnerability from fkie_nvd
Published
2016-07-04 22:59
Modified
2025-04-12 10:46
Severity ?
7.5 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Summary
The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter.
References
vultures@jpcert.or.jphttp://jvn.jp/en/jp/JVN86448949/index.htmlVendor Advisory
vultures@jpcert.or.jphttp://jvndb.jvn.jp/jvndb/JVNDB-2015-000042Vendor Advisory
vultures@jpcert.or.jphttp://www.debian.org/security/2016/dsa-3536
vultures@jpcert.or.jphttp://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
vultures@jpcert.or.jphttp://www.securityfocus.com/bid/74423
vultures@jpcert.or.jphttps://en.osdn.jp/projects/terasoluna/wiki/StrutsPatch2-ENPatch
vultures@jpcert.or.jphttps://security.netapp.com/advisory/ntap-20180629-0006/
af854a3a-2127-422b-91ae-364da2661108http://jvn.jp/en/jp/JVN86448949/index.htmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://jvndb.jvn.jp/jvndb/JVNDB-2015-000042Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2016/dsa-3536
af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/74423
af854a3a-2127-422b-91ae-364da2661108https://en.osdn.jp/projects/terasoluna/wiki/StrutsPatch2-ENPatch
af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20180629-0006/
Impacted products
Vendor Product Version
apache struts 1.0
apache struts 1.0.2
apache struts 1.1
apache struts 1.1
apache struts 1.1
apache struts 1.1
apache struts 1.1
apache struts 1.1
apache struts 1.2.2
apache struts 1.2.4
apache struts 1.2.6
apache struts 1.2.7
apache struts 1.2.8
apache struts 1.2.9
apache struts 1.3.5
apache struts 1.3.8
apache struts 1.3.10


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:struts:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5051228-446E-461D-9B5F-8F765C7BA57F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE1B8A83-43A4-4C4F-BB95-4D9CAD882D1C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A55DDFE1-A8AB-47BB-903E-957FCF3D023D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.1:b1:*:*:*:*:*:*",
              "matchCriteriaId": "93FA9AE3-B453-4FE6-82A9-7DDEF3F6C464",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.1:b2:*:*:*:*:*:*",
              "matchCriteriaId": "A3BB6FBE-469B-4920-A30B-33AD9E41ACCD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.1:b3:*:*:*:*:*:*",
              "matchCriteriaId": "34FC82D3-CCAF-4F37-B531-2A9CA17311A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.1:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "E0B8B413-8C62-44B6-A382-26F35F4573D4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.1:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "6309C679-890A-4214-8857-9F119CBBAA00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD882860-03D0-49E9-8CED-DE6663392548",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "EDDD509E-9EBF-483F-9546-A1A3A1A3380E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2ECF5E1-457F-4E76-81F7-65114DC4E1E4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.2.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FC81E1A-2779-4FAF-866C-970752CD1828",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.2.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "CBD69FAE-C1A3-4213-824A-7DCCE357EB01",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.2.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C34FDB0-2778-4C36-8345-F7E27509A383",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.3.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF0302D3-CB8D-4FA7-8F07-C2C7593877BE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.3.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "03906D34-F3B3-4C56-A6A6-2F7A10168501",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:struts:1.3.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B3872B7-2972-433D-96A1-154FA545B311",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter."
    },
    {
      "lang": "es",
      "value": "La implementaci\u00f3n MultiPageValidator en Apache Struts 1 1.1 hasta la versi\u00f3n 1.3.10 permite a atacantes remotos eludir las restricciones destinadas al acceso a trav\u00e9s de un par\u00e1metro page modificado."
    }
  ],
  "id": "CVE-2015-0899",
  "lastModified": "2025-04-12T10:46:40.837",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": true,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2016-07-04T22:59:00.147",
  "references": [
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://jvn.jp/en/jp/JVN86448949/index.html"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2015-000042"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "http://www.debian.org/security/2016/dsa-3536"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "http://www.securityfocus.com/bid/74423"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Patch"
      ],
      "url": "https://en.osdn.jp/projects/terasoluna/wiki/StrutsPatch2-EN"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "https://security.netapp.com/advisory/ntap-20180629-0006/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://jvn.jp/en/jp/JVN86448949/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2015-000042"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2016/dsa-3536"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/74423"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://en.osdn.jp/projects/terasoluna/wiki/StrutsPatch2-EN"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://security.netapp.com/advisory/ntap-20180629-0006/"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.