CVE-2016-4436
critical
CVSS v3
9.8
CVSS v2
7.5
VIR risk
9.8
Description
Apache Struts improper action name cleanup
Predictions
Exploit likelihood
97%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: secalert@redhat.com — https://struts.apache.org/docs/s2-035.html
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Maven | org.apache.struts:struts2-core | >=2.0.0,<2.3.29 | 2.3.29 |
| Maven | org.apache.struts:struts2-core | >=2.5-BETA1,<2.5.1 | 2.5.1 |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| apache | struts | 2.0.6 | |
| apache | struts | 2.0.0 | |
| apache | struts | 2.0.1 | |
| apache | struts | 2.0.2 | |
| apache | struts | 2.0.3 | |
| apache | struts | 2.0.4 | |
| apache | struts | 2.0.5 | |
| apache | struts | 2.0.7 | |
| apache | struts | 2.0.8 | |
| apache | struts | 2.0.9 | |
| apache | struts | 2.0.11 | |
| apache | struts | 2.0.11.1 | |
| apache | struts | 2.0.11.2 | |
| apache | struts | 2.0.12 | |
| apache | struts | 2.0.14 | |
| apache | struts | 2.1.6 | |
| apache | struts | 2.1.8 | |
| apache | struts | 2.1.8.1 | |
| apache | struts | 2.2.1 | |
| apache | struts | 2.2.1.1 | |
| apache | struts | 2.2.3 | |
| apache | struts | 2.2.3.1 | |
| apache | struts | 2.3.1 | |
| apache | struts | 2.3.1.1 | |
| apache | struts | 2.3.1.2 | |
| apache | struts | 2.3.3 | |
| apache | struts | 2.3.4 | |
| apache | struts | 2.3.4.1 | |
| apache | struts | 2.3.7 | |
| apache | struts | 2.3.8 | |
| apache | struts | 2.3.12 | |
| apache | struts | 2.3.14 | |
| apache | struts | 2.3.14.1 | |
| apache | struts | 2.3.14.2 | |
| apache | struts | 2.3.14.3 | |
| apache | struts | 2.3.15 | |
| apache | struts | 2.3.15.1 | |
| apache | struts | 2.3.15.2 | |
| apache | struts | 2.3.15.3 | |
| apache | struts | 2.3.16 | |
| apache | struts | 2.3.16.1 | |
| apache | struts | 2.3.16.2 | |
| apache | struts | 2.3.16.3 | |
| apache | struts | 2.3.20 | |
| apache | struts | 2.3.20.1 | |
| apache | struts | 2.3.20.3 | |
| apache | struts | 2.3.24 | |
| apache | struts | 2.3.24.1 | |
| apache | struts | 2.3.24.3 | |
| apache | struts | 2.3.28 | |
| apache | struts | 2.3.28.1 | |
| apache | struts | 2.5 | |
References
- http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282
- http://www-01.ibm.com/support/docview.wss?uid=swg21987854
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
- http://www.securityfocus.com/bid/91280
- https://struts.apache.org/docs/s2-035.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-4436
- https://github.com/apache/struts/commit/237432512df0e27013f7c7b9ab59fdce44ca34a5
- https://github.com/apache/struts/commit/27ca165ddbf81c84bafbd083b99a18d89cc49ca7
- https://github.com/apache/struts
- https://web.archive.org/web/20161015140316/http://www.securityfocus.com/bid/91280
Verify integrity in audit chain (admin only). AS-IS.