Permissions, Privileges, and Access Controls in Apache Struts - CVE-2013-4310

Vulnerability identifier: #VU82187

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2013-4310

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions, which leads to security restrictions bypass and privilege escalation.

Apache Struts
SAN Volume Controller and Storwize Family
Sterling Web Channel
IBM Sterling Order Management
Call Center for Commerce

Install updates from vendor's website.

SAN Volume Controller and Storwize Family - addressed in versions 6.4.1.7, 7.1.0.6
Sterling Web Channel - addressed in versions 9.0.0-SFP1, 9.1.0- SFP1
IBM Sterling Order Management - update to 10.0.0.29
Call Center for Commerce - update to 10.0.12

• http://archives.neohapsis.com/archives/bugtraq/2013-09/0107.html
• http://archives.neohapsis.com/archives/bugtraq/2013-10/0083.html
• http://secunia.com/advisories/54919
• http://secunia.com/advisories/56483
• http://secunia.com/advisories/56492
• http://struts.apache.org/release/2.3.x/docs/s2-018.html
• http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
• http://www.securityfocus.com/bid/64758
• http://www.securitytracker.com/id/1029077

• Multiple vulnerabilities in IBM SAN Volume Controller and Storwize Family
• Multiple vulnerabilities in IBM Sterling Order Management
• Multiple vulnerabilities in IBM Call Center for Commerce
• Multiple vulnerabilities in IBM Sterling Web Channel