Lucene search
F5F5:K15262HistoryMay 15, 2014 - 12:00 a.m.
K15262 : Apache Struts vulnerability CVE-2014-0113
2014-05-1500:00:00
my.f5.com
27
Security Advisory Description
CookieInterceptor in Apache Struts before 2.3.16.2, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to “manipulate” the ClassLoader and execute arbitrary code via a crafted request. (CVE-2014-0113)
Impact
None. F5 products do not use the affected Apache Struts version.
Related
nvd
nvd
CVE-2014-0113
2014-04-29 10:37:03
CVE-2014-0116
2014-05-08 10:55:02
ubuntucve
ubuntucve
CVE-2014-0113
2014-04-29 00:00:00
CVE-2014-0116
2014-05-08 00:00:00
openvas
openvas
Apache Struts ClassLoader Manipulation Vulnerabilities (S2-021) - Linux
2019-08-28 00:00:00
Apache Struts Security Update (S2-021, S2-022, S2-023, S2-025)
2019-08-28 00:00:00
prion
prion
Design/Logic Flaw
2014-04-29 10:37:00
Design/Logic Flaw
2014-05-08 10:55:00
nessus
nessus
Apache Struts 2 ClassLoader Manipulation Incomplete Fix for Security Bypass
2014-04-29 00:00:00
Apache Struts 2.x < 2.3.20 Multiple ClassLoader Manipulation Vulnerabilities (S2-021)
2018-09-12 00:00:00
MySQL Enterprise Monitor 3.0.x < 3.0.11 Multiple Vulnerabilities
2015-05-08 00:00:00
cvelist
cvelist
CVE-2014-0116
2014-05-08 10:00:00
CVE-2014-0113
2014-04-29 10:00:00
osv
osv
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:14
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:15
github
github
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:14
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:15
cve
cve
CVE-2014-0113
2014-04-29 10:37:03
CVE-2014-0116
2014-05-08 10:55:02
veracode
veracode
Class Loader Manipulation With CookieInterceptor
2014-06-06 18:13:23
f5
f5
SOL15261 - Apache Struts vulnerability CVE-2014-0112
2014-05-15 00:00:00
SOL14933 - Apache Struts vulnerability CVE-2013-2251
2014-01-20 00:00:00
SOL15260 - Apache Struts vulnerability CVE-2014-0094
2014-05-15 00:00:00
checkpoint_advisories
checkpoint_advisories
ibm
ibm
Security Bulletin: IBM Sterling Order Management, IBM Sterling Configure, Price, Quote and Sterling Web Channel are affected by Apache Struts 2 security vulnerabilities
2020-02-11 21:39:06
oracle
oracle
Oracle Critical Patch Update - April 2015
2015-04-14 00:00:00