fkie_cve-2017-5638
Vulnerability from fkie_nvd
Published
2017-03-11 02:59
Modified
2025-03-21 21:08
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.
References
security@apache.orghttp://blog.talosintelligence.com/2017/03/apache-0-day-exploited.htmlExploit, Third Party Advisory
security@apache.orghttp://blog.trendmicro.com/trendlabs-security-intelligence/cve-2017-5638-apache-struts-vulnerability-remote-code-execution/Exploit, Third Party Advisory
security@apache.orghttp://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-002.txtThird Party Advisory
security@apache.orghttp://www.eweek.com/security/apache-struts-vulnerability-under-attack.htmlPress/Media Coverage, Third Party Advisory
security@apache.orghttp://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatch, Third Party Advisory
security@apache.orghttp://www.securityfocus.com/bid/96729Broken Link, Third Party Advisory, VDB Entry
security@apache.orghttp://www.securitytracker.com/id/1037973Broken Link, Third Party Advisory, VDB Entry
security@apache.orghttps://arstechnica.com/security/2017/03/critical-vulnerability-under-massive-attack-imperils-high-impact-sites/Exploit, Press/Media Coverage
security@apache.orghttps://cwiki.apache.org/confluence/display/WW/S2-045Mitigation, Vendor Advisory
security@apache.orghttps://cwiki.apache.org/confluence/display/WW/S2-046Mitigation, Vendor Advisory
security@apache.orghttps://exploit-db.com/exploits/41570Exploit, Third Party Advisory, VDB Entry
security@apache.orghttps://git1-us-west.apache.org/repos/asf?p=struts.git%3Ba=commit%3Bh=352306493971e7d5a756d61780d57a76eb1f519aBroken Link
security@apache.orghttps://git1-us-west.apache.org/repos/asf?p=struts.git%3Ba=commit%3Bh=6b8272ce47160036ed120a48345d9aa884477228Broken Link
security@apache.orghttps://github.com/mazen160/struts-pwnExploit
security@apache.orghttps://github.com/rapid7/metasploit-framework/issues/8064Exploit, Issue Tracking
security@apache.orghttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03733en_usBroken Link
security@apache.orghttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03749en_usThird Party Advisory
security@apache.orghttps://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03723en_usThird Party Advisory
security@apache.orghttps://isc.sans.edu/diary/22169Exploit, Third Party Advisory
security@apache.orghttps://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3EMailing List
security@apache.orghttps://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3EMailing List
security@apache.orghttps://lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922%40%3Cannounce.apache.org%3EMailing List
security@apache.orghttps://nmap.org/nsedoc/scripts/http-vuln-cve2017-5638.htmlExploit, Third Party Advisory
security@apache.orghttps://packetstormsecurity.com/files/141494/S2-45-poc.py.txtExploit, Third Party Advisory, VDB Entry
security@apache.orghttps://security.netapp.com/advisory/ntap-20170310-0001/Third Party Advisory
security@apache.orghttps://struts.apache.org/docs/s2-045.htmlMitigation, Vendor Advisory
security@apache.orghttps://struts.apache.org/docs/s2-046.htmlMitigation, Vendor Advisory
security@apache.orghttps://support.lenovo.com/us/en/product_security/len-14200Third Party Advisory
security@apache.orghttps://twitter.com/theog150/status/841146956135124993Broken Link, Third Party Advisory
security@apache.orghttps://www.exploit-db.com/exploits/41614/Exploit, Third Party Advisory, VDB Entry
security@apache.orghttps://www.imperva.com/blog/2017/03/cve-2017-5638-new-remote-code-execution-rce-vulnerability-in-apache-struts-2/Third Party Advisory
security@apache.orghttps://www.kb.cert.org/vuls/id/834067Third Party Advisory, US Government Resource
security@apache.orghttps://www.symantec.com/security-center/network-protection-security-advisories/SA145Broken Link
af854a3a-2127-422b-91ae-364da2661108http://blog.talosintelligence.com/2017/03/apache-0-day-exploited.htmlExploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2017-5638-apache-struts-vulnerability-remote-code-execution/Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-002.txtThird Party Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.eweek.com/security/apache-struts-vulnerability-under-attack.htmlPress/Media Coverage, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/96729Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1037973Broken Link, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108https://arstechnica.com/security/2017/03/critical-vulnerability-under-massive-attack-imperils-high-impact-sites/Exploit, Press/Media Coverage
af854a3a-2127-422b-91ae-364da2661108https://cwiki.apache.org/confluence/display/WW/S2-045Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://cwiki.apache.org/confluence/display/WW/S2-046Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exploit-db.com/exploits/41570Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108https://git1-us-west.apache.org/repos/asf?p=struts.git%3Ba=commit%3Bh=352306493971e7d5a756d61780d57a76eb1f519aBroken Link
af854a3a-2127-422b-91ae-364da2661108https://git1-us-west.apache.org/repos/asf?p=struts.git%3Ba=commit%3Bh=6b8272ce47160036ed120a48345d9aa884477228Broken Link
af854a3a-2127-422b-91ae-364da2661108https://github.com/mazen160/struts-pwnExploit
af854a3a-2127-422b-91ae-364da2661108https://github.com/rapid7/metasploit-framework/issues/8064Exploit, Issue Tracking
af854a3a-2127-422b-91ae-364da2661108https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03733en_usBroken Link
af854a3a-2127-422b-91ae-364da2661108https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03749en_usThird Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03723en_usThird Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://isc.sans.edu/diary/22169Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3EMailing List
af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3EMailing List
af854a3a-2127-422b-91ae-364da2661108https://lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922%40%3Cannounce.apache.org%3EMailing List
af854a3a-2127-422b-91ae-364da2661108https://nmap.org/nsedoc/scripts/http-vuln-cve2017-5638.htmlExploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://packetstormsecurity.com/files/141494/S2-45-poc.py.txtExploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20170310-0001/Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://struts.apache.org/docs/s2-045.htmlMitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://struts.apache.org/docs/s2-046.htmlMitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://support.lenovo.com/us/en/product_security/len-14200Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://twitter.com/theog150/status/841146956135124993Broken Link, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/41614/Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108https://www.imperva.com/blog/2017/03/cve-2017-5638-new-remote-code-execution-rce-vulnerability-in-apache-struts-2/Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.kb.cert.org/vuls/id/834067Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108https://www.symantec.com/security-center/network-protection-security-advisories/SA145Broken Link
Impacted products
Vendor Product Version
apache struts *
apache struts *
ibm storwize_v3500_firmware 7.7.1.6
ibm storwize_v3500_firmware 7.8.1.0
ibm storwize_v3500 -
ibm storwize_v5000_firmware 7.7.1.6
ibm storwize_v5000_firmware 7.8.1.0
ibm storwize_v5000 -
ibm storwize_v7000_firmware 7.7.1.6
ibm storwize_v7000_firmware 7.8.1.0
ibm storwize_v7000 -
lenovo storage_v5030_firmware 7.7.1.6
lenovo storage_v5030_firmware 7.8.1.0
lenovo storage_v5030 -
hp server_automation 9.1.0
hp server_automation 10.0.0
hp server_automation 10.1.0
hp server_automation 10.2.0
hp server_automation 10.5.0
oracle weblogic_server 10.3.6.0.0
oracle weblogic_server 12.1.3.0.0
oracle weblogic_server 12.2.1.1.0
oracle weblogic_server 12.2.1.2.0
arubanetworks clearpass_policy_manager *
netapp oncommand_balance -


To clipboard 

{
   cisaActionDue: "2022-05-03",
   cisaExploitAdd: "2021-11-03",
   cisaRequiredAction: "Apply updates per vendor instructions.",
   cisaVulnerabilityName: "Apache Struts Remote Code Execution Vulnerability",
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "40D3EE72-E37F-4F4C-996D-50E144CF43DD",
                     versionEndExcluding: "2.3.32",
                     versionStartIncluding: "2.2.3",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "E2F63D06-B26A-4DB6-8B07-B847554ABCA8",
                     versionEndExcluding: "2.5.10.1",
                     versionStartIncluding: "2.5.0",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:ibm:storwize_v3500_firmware:7.7.1.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "5AB119E1-7736-4C99-AD9C-9E8820769D4F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:storwize_v3500_firmware:7.8.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "A8A0C06E-B833-4A52-B1F0-FEC9BEF372A4",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:h:ibm:storwize_v3500:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "7352FACE-C8D0-49A7-A2D7-B755599F0FB3",
                     vulnerable: false,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:ibm:storwize_v5000_firmware:7.7.1.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "F445D22E-8976-4ADC-81FD-49B351B2802A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:storwize_v5000_firmware:7.8.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "1B9E6724-8796-4DD5-9CE2-8E602DA893F9",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:h:ibm:storwize_v5000:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "F0B69C8D-32A4-449F-9BFC-F1587C7FA8BD",
                     vulnerable: false,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:ibm:storwize_v7000_firmware:7.7.1.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "D1D7A801-1861-4479-9367-60F792BF8016",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:storwize_v7000_firmware:7.8.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "EDF96E49-9530-4718-B5A9-7366D10CC890",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:h:ibm:storwize_v7000:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "AA2ED020-4C7B-4303-ABE6-74D46D127556",
                     vulnerable: false,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:lenovo:storage_v5030_firmware:7.7.1.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "371CD28E-6187-4EB1-8B73-645F7A6BFFD6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:lenovo:storage_v5030_firmware:7.8.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "DA0AFFAA-F7AE-416C-A40D-24F972EE18BD",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:h:lenovo:storage_v5030:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "A2A4179B-51C5-486B-8CFF-D49436D60910",
                     vulnerable: false,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:hp:server_automation:9.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "112DFE68-A609-4B76-8227-4DE9CAC25F54",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:hp:server_automation:10.0.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "951C042F-9C83-4DBB-8070-A926A1B46591",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:hp:server_automation:10.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "AC9404A4-6B73-436E-A8FB-914530D6000A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:hp:server_automation:10.2.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "32AFBE84-5394-49A1-844A-ED964A46ACF7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:hp:server_automation:10.5.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "38ABFD4F-8E97-4418-A921-BF9F4D95A4A4",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "B40B13B7-68B3-4510-968C-6A730EB46462",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "C93CC705-1F8C-4870-99E6-14BF264C3811",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:oracle:weblogic_server:12.2.1.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "29F4C533-DE42-463B-9D80-5D4C85BF1A5B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:oracle:weblogic_server:12.2.1.2.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "3A1728D5-E03B-49A0-849C-B722197AF054",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "8D1193B0-59C9-4AC0-BBA0-CED6FCC91883",
                     versionEndExcluding: "6.6.5",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:netapp:oncommand_balance:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "7DCBCC5D-C396-47A8-ADF4-D3A2C4377FB1",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted Content-Type, Content-Disposition, or Content-Length HTTP header, as exploited in the wild in March 2017 with a Content-Type header containing a #cmd= string.",
      },
      {
         lang: "es",
         value: "El analizador sintáctico Jakarta Multipart en Apache Struts 2 en versiones 2.3.x anteriores a la 2.3.32 y versiones 2.5.x anteriores a la 2.5.10.1 no maneja correctamente las excepciones y la generación de mensajes de error, lo que permite a atacantes remotos ejecutar comandos arbitrarios a través de una cadena #cmd= en un encabezado HTTP de Content-Type, Content-Disposition o Content-Length manipulado.",
      },
   ],
   id: "CVE-2017-5638",
   lastModified: "2025-03-21T21:08:49.543",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "COMPLETE",
               baseScore: 10,
               confidentialityImpact: "COMPLETE",
               integrityImpact: "COMPLETE",
               vectorString: "AV:N/AC:L/Au:N/C:C/I:C/A:C",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 10,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
      cvssMetricV31: [
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "HIGH",
               baseScore: 9.8,
               baseSeverity: "CRITICAL",
               confidentialityImpact: "HIGH",
               integrityImpact: "HIGH",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
               version: "3.1",
            },
            exploitabilityScore: 3.9,
            impactScore: 5.9,
            source: "nvd@nist.gov",
            type: "Primary",
         },
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "HIGH",
               baseScore: 9.8,
               baseSeverity: "CRITICAL",
               confidentialityImpact: "HIGH",
               integrityImpact: "HIGH",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
               version: "3.1",
            },
            exploitabilityScore: 3.9,
            impactScore: 5.9,
            source: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            type: "Secondary",
         },
      ],
   },
   published: "2017-03-11T02:59:00.150",
   references: [
      {
         source: "security@apache.org",
         tags: [
            "Exploit",
            "Third Party Advisory",
         ],
         url: "http://blog.talosintelligence.com/2017/03/apache-0-day-exploited.html",
      },
      {
         source: "security@apache.org",
         tags: [
            "Exploit",
            "Third Party Advisory",
         ],
         url: "http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2017-5638-apache-struts-vulnerability-remote-code-execution/",
      },
      {
         source: "security@apache.org",
         tags: [
            "Third Party Advisory",
         ],
         url: "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-002.txt",
      },
      {
         source: "security@apache.org",
         tags: [
            "Press/Media Coverage",
            "Third Party Advisory",
         ],
         url: "http://www.eweek.com/security/apache-struts-vulnerability-under-attack.html",
      },
      {
         source: "security@apache.org",
         tags: [
            "Patch",
            "Third Party Advisory",
         ],
         url: "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
      },
      {
         source: "security@apache.org",
         tags: [
            "Broken Link",
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://www.securityfocus.com/bid/96729",
      },
      {
         source: "security@apache.org",
         tags: [
            "Broken Link",
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://www.securitytracker.com/id/1037973",
      },
      {
         source: "security@apache.org",
         tags: [
            "Exploit",
            "Press/Media Coverage",
         ],
         url: "https://arstechnica.com/security/2017/03/critical-vulnerability-under-massive-attack-imperils-high-impact-sites/",
      },
      {
         source: "security@apache.org",
         tags: [
            "Mitigation",
            "Vendor Advisory",
         ],
         url: "https://cwiki.apache.org/confluence/display/WW/S2-045",
      },
      {
         source: "security@apache.org",
         tags: [
            "Mitigation",
            "Vendor Advisory",
         ],
         url: "https://cwiki.apache.org/confluence/display/WW/S2-046",
      },
      {
         source: "security@apache.org",
         tags: [
            "Exploit",
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "https://exploit-db.com/exploits/41570",
      },
      {
         source: "security@apache.org",
         tags: [
            "Broken Link",
         ],
         url: "https://git1-us-west.apache.org/repos/asf?p=struts.git%3Ba=commit%3Bh=352306493971e7d5a756d61780d57a76eb1f519a",
      },
      {
         source: "security@apache.org",
         tags: [
            "Broken Link",
         ],
         url: "https://git1-us-west.apache.org/repos/asf?p=struts.git%3Ba=commit%3Bh=6b8272ce47160036ed120a48345d9aa884477228",
      },
      {
         source: "security@apache.org",
         tags: [
            "Exploit",
         ],
         url: "https://github.com/mazen160/struts-pwn",
      },
      {
         source: "security@apache.org",
         tags: [
            "Exploit",
            "Issue Tracking",
         ],
         url: "https://github.com/rapid7/metasploit-framework/issues/8064",
      },
      {
         source: "security@apache.org",
         tags: [
            "Broken Link",
         ],
         url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03733en_us",
      },
      {
         source: "security@apache.org",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03749en_us",
      },
      {
         source: "security@apache.org",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03723en_us",
      },
      {
         source: "security@apache.org",
         tags: [
            "Exploit",
            "Third Party Advisory",
         ],
         url: "https://isc.sans.edu/diary/22169",
      },
      {
         source: "security@apache.org",
         tags: [
            "Mailing List",
         ],
         url: "https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3E",
      },
      {
         source: "security@apache.org",
         tags: [
            "Mailing List",
         ],
         url: "https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E",
      },
      {
         source: "security@apache.org",
         tags: [
            "Mailing List",
         ],
         url: "https://lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922%40%3Cannounce.apache.org%3E",
      },
      {
         source: "security@apache.org",
         tags: [
            "Exploit",
            "Third Party Advisory",
         ],
         url: "https://nmap.org/nsedoc/scripts/http-vuln-cve2017-5638.html",
      },
      {
         source: "security@apache.org",
         tags: [
            "Exploit",
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "https://packetstormsecurity.com/files/141494/S2-45-poc.py.txt",
      },
      {
         source: "security@apache.org",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://security.netapp.com/advisory/ntap-20170310-0001/",
      },
      {
         source: "security@apache.org",
         tags: [
            "Mitigation",
            "Vendor Advisory",
         ],
         url: "https://struts.apache.org/docs/s2-045.html",
      },
      {
         source: "security@apache.org",
         tags: [
            "Mitigation",
            "Vendor Advisory",
         ],
         url: "https://struts.apache.org/docs/s2-046.html",
      },
      {
         source: "security@apache.org",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://support.lenovo.com/us/en/product_security/len-14200",
      },
      {
         source: "security@apache.org",
         tags: [
            "Broken Link",
            "Third Party Advisory",
         ],
         url: "https://twitter.com/theog150/status/841146956135124993",
      },
      {
         source: "security@apache.org",
         tags: [
            "Exploit",
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "https://www.exploit-db.com/exploits/41614/",
      },
      {
         source: "security@apache.org",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://www.imperva.com/blog/2017/03/cve-2017-5638-new-remote-code-execution-rce-vulnerability-in-apache-struts-2/",
      },
      {
         source: "security@apache.org",
         tags: [
            "Third Party Advisory",
            "US Government Resource",
         ],
         url: "https://www.kb.cert.org/vuls/id/834067",
      },
      {
         source: "security@apache.org",
         tags: [
            "Broken Link",
         ],
         url: "https://www.symantec.com/security-center/network-protection-security-advisories/SA145",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
            "Third Party Advisory",
         ],
         url: "http://blog.talosintelligence.com/2017/03/apache-0-day-exploited.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
            "Third Party Advisory",
         ],
         url: "http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2017-5638-apache-struts-vulnerability-remote-code-execution/",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
         ],
         url: "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-002.txt",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Press/Media Coverage",
            "Third Party Advisory",
         ],
         url: "http://www.eweek.com/security/apache-struts-vulnerability-under-attack.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Third Party Advisory",
         ],
         url: "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Broken Link",
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://www.securityfocus.com/bid/96729",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Broken Link",
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://www.securitytracker.com/id/1037973",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
            "Press/Media Coverage",
         ],
         url: "https://arstechnica.com/security/2017/03/critical-vulnerability-under-massive-attack-imperils-high-impact-sites/",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Mitigation",
            "Vendor Advisory",
         ],
         url: "https://cwiki.apache.org/confluence/display/WW/S2-045",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Mitigation",
            "Vendor Advisory",
         ],
         url: "https://cwiki.apache.org/confluence/display/WW/S2-046",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "https://exploit-db.com/exploits/41570",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Broken Link",
         ],
         url: "https://git1-us-west.apache.org/repos/asf?p=struts.git%3Ba=commit%3Bh=352306493971e7d5a756d61780d57a76eb1f519a",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Broken Link",
         ],
         url: "https://git1-us-west.apache.org/repos/asf?p=struts.git%3Ba=commit%3Bh=6b8272ce47160036ed120a48345d9aa884477228",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
         ],
         url: "https://github.com/mazen160/struts-pwn",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
            "Issue Tracking",
         ],
         url: "https://github.com/rapid7/metasploit-framework/issues/8064",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Broken Link",
         ],
         url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03733en_us",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03749en_us",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03723en_us",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
            "Third Party Advisory",
         ],
         url: "https://isc.sans.edu/diary/22169",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Mailing List",
         ],
         url: "https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7%40%3Cannounce.apache.org%3E",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Mailing List",
         ],
         url: "https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Mailing List",
         ],
         url: "https://lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922%40%3Cannounce.apache.org%3E",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
            "Third Party Advisory",
         ],
         url: "https://nmap.org/nsedoc/scripts/http-vuln-cve2017-5638.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "https://packetstormsecurity.com/files/141494/S2-45-poc.py.txt",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://security.netapp.com/advisory/ntap-20170310-0001/",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Mitigation",
            "Vendor Advisory",
         ],
         url: "https://struts.apache.org/docs/s2-045.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Mitigation",
            "Vendor Advisory",
         ],
         url: "https://struts.apache.org/docs/s2-046.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://support.lenovo.com/us/en/product_security/len-14200",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Broken Link",
            "Third Party Advisory",
         ],
         url: "https://twitter.com/theog150/status/841146956135124993",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "https://www.exploit-db.com/exploits/41614/",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://www.imperva.com/blog/2017/03/cve-2017-5638-new-remote-code-execution-rce-vulnerability-in-apache-struts-2/",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
            "US Government Resource",
         ],
         url: "https://www.kb.cert.org/vuls/id/834067",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Broken Link",
         ],
         url: "https://www.symantec.com/security-center/network-protection-security-advisories/SA145",
      },
   ],
   sourceIdentifier: "security@apache.org",
   vulnStatus: "Analyzed",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-755",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
      {
         description: [
            {
               lang: "en",
               value: "CWE-755",
            },
         ],
         source: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
         type: "Secondary",
      },
   ],
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.