Security restrictions bypass in Apache Struts - CVE-2015-0899

Vulnerability identifier: #VU9754

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-0899

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass security restrictions on the target system.

The weakness exists due to an error in the MultiPageValidator implementation in Apache Struts. A remote attacker can supply a modified page parameter to bypass intended access restrictions.

Apache Struts
Debian Linux
Fedora
IBM Tivoli System Automation Application Manager
IBM Cloud Pak for Business Automation
Integration Designer
eDiscovery Manager
struts

Update to version 1.3.10.

struts - addressed in versions 1.3.10-14.fc22, 1.3.10-14.1.el7
eDiscovery Manager - update to 2.2.2.3.8
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3-IF035, 24.0.0-IF001

• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

• Debian update for libstruts1.2-java
• Security restrictions bypass in IBM Tivoli System Automation Application Manager
• Multiple vulnerabilities in IBM Integration Designer
• Multiple vulnerabilities in IBM eDiscovery Manager
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Fedora 22 update for struts
• Fedora EPEL 7 update for struts