CVE-2012-0394 in Apache Strutsinfo

Summary

** DISPUTED ** The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. NOTE: the vendor characterizes this behavior as not "a security vulnerability itself."

Reservation

01/08/2012

Disclosure

01/08/2012

Entries

VulDB provides additional information and datapoints for this CVE:

IDVulnerabilityCWEExpCouCVE
12291Apache Struts DebuggingInterceptor code injection94HighOfficial fixCVE-2012-0394
4528Apache Struts DebuggingInterceptor code injection94HighOfficial fixCVE-2012-0394

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

◂ PreviousOverviewNext ▸

Want to know what is going to be exploited?

We predict KEV entries!