8.1

CVE-2017-9805

Warnung
Exploit
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache ≫ Struts Version >= 2.1.2 < 2.3.34
Apache ≫ Struts Version >= 2.5.0 < 2.5.13
Cisco ≫ Media Experience Engine Version3.5.2
Netapp ≫ Oncommand Balance Version-

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

Apache Struts Deserialization of Untrusted Data Vulnerability

Schwachstelle

Apache Struts REST Plugin uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to remote code execution when deserializing XML payloads.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 99.46% 0.999
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.1 2.2 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0 8.1 2.2 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html
Patch
Third Party Advisory
http://www.securityfocus.com/bid/100609
Third Party Advisory
Broken Link
VDB Entry
http://www.securitytracker.com/id/1039263
Third Party Advisory
Broken Link
VDB Entry
https://blogs.apache.org/foundation/entry/apache-struts-statement-on-equifax
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1488482
Third Party Advisory
VDB Entry
Issue Tracking
https://cwiki.apache.org/confluence/display/WW/S2-052
Vendor Advisory
Mitigation
https://lgtm.com/blog/apache_struts_CVE-2017-9805
Broken Link
https://security.netapp.com/advisory/ntap-20170907-0001/
Third Party Advisory
https://struts.apache.org/docs/s2-052.html
Vendor Advisory
Mitigation
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2
Third Party Advisory
https://www.exploit-db.com/exploits/42627/
Third Party Advisory
Exploit
VDB Entry
https://www.kb.cert.org/vuls/id/112992
Third Party Advisory
US Government Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-9805
US Government Resource