CVE-2011-3923
01.11.2019, 14:15
Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | struts | 2.0.0 ≤ 𝑥 < 2.3.1.2 |
| redhat | jboss_enterprise_web_server | 1.0.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libspring-2.5-java |
| ||||||||||||||||||||||||||||||
| libstruts1.2-java |
|
Common Weakness Enumeration
References