CVE-2011-3923 in Struts
Summary
Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
10/01/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 144780 | Apache Struts ParameterInterceptor permission assignment | 732 | High | Official fix | CVE-2011-3923 |
| 4571 | Apache Struts privileges management | 269 | High | Official fix | CVE-2011-3923 |