CVE-2018-11776Apache Struts Remote Code Execution Vulnerability
Bekannt ausgenutzt — Apache Struts Remote Code Execution Vulnerability
CISA hat am 03.11.2021 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 03.05.2022.
Erforderliche Maßnahme: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2018-11776
Beschreibung
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn't have value and action set and in same time, its upper package have no or wildcard namespace.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Apache Software Foundation | Apache Struts | 2.3 to 2.3.34, 2.5 to 2.5.16 | |
| apache | struts | 2.0.4 – < 2.3.35 | |
| netapp | active iq unified manager | 7.3 – | |
| netapp | oncommand insight | — | |
| netapp | oncommand workflow automation | — | |
| netapp | snapcenter | — | |
| oracle | communications policy management | < 12.5.0 | |
| oracle | enterprise manager base platform | 13.3.0.0 | |
| oracle | mysql enterprise monitor | ≤ 3.4.9.4237 |
Referenzen und Patches
- 1041888 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- 45367 exploitExploitThird Party AdvisoryVDB Entry
- 45262 exploitExploitThird Party AdvisoryVDB Entry
- 105125 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- 1041547 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- 45260 exploitExploitThird Party AdvisoryVDB Entry
- [announce] 20200131 Apache Software Foundation Security Report: 2019 mailing-listMailing List
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html PatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpujul2020.html Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html PatchThird Party Advisory
- https://security.netapp.com/advisory/ntap-20181018-0002/ Third Party Advisory
- https://cwiki.apache.org/confluence/display/WW/S2-057 Issue TrackingThird Party Advisory
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0012 Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/alert-cve-2018-11776-5072787.html PatchThird Party Advisory
- https://lgtm.com/blog/apache_struts_CVE-2018-11776 ExploitThird Party Advisory
- https://security.netapp.com/advisory/ntap-20180822-0001/ Third Party Advisory
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-005.txt Broken LinkMailing ListThird Party Advisory
- https://github.com/hook-s3c/CVE-2018-11776-Python-PoC ExploitThird Party Advisory
- http://packetstormsecurity.com/files/172830/Apache-Struts-Remote-Code-Execution.html Third Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-11776 US Government Resource
CPE-Treffer (NVD) (13)
cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*≥ 2.0.4 < 2.3.35cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*≥ 2.5.0 < 2.5.17cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*≥ 7.3cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*≥ 9.5cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*cpe:2.3:a:oracle:communications_policy_management:*:*:*:*:*:*:*:*< 12.5.0cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*≤ 3.4.9.4237cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*≥ 4.0.0 ≤ 4.0.6.5281cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*≥ 8.0.0 ≤ 8.0.2.8191