#VU90112 Permissions, Privileges, and Access Controls in Apache Struts - CVE-2011-5057

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU90112

#VU90112 Permissions, Privileges, and Access Controls in Apache Struts - CVE-2011-5057

Published: May 31, 2024


Vulnerability identifier: #VU90112
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/U:Green
CVE-ID: CVE-2011-5057
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability: Public exploit is available
Vulnerable software:
Apache Struts
Software vendor:
Apache Foundation

Description

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to Apache Struts provides interfaces that do not properly restrict access to collections such as the session and request collections. A remote attacker can modify run-time data values via a crafted parameter to an application that implements an affected interface.


Remediation

Install updates from vendor's website.

External links