Red Hat Security AdvisoryRHSA-2014:0474
struts security update
Released 2014-05-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) struts-1.2.9-4jpp.8.el5_10, struts-1.2.9-4jpp.8.el5_10.i386, struts-1.2.9-4jpp.8.el5_10.ia64 +13
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) struts-1.2.9-4jpp.8.el5_10, struts-1.2.9-4jpp.8.el5_10.i386, struts-javadoc-1.2.9-4jpp.8.el5_10 +5
Fixes 1 record
Priority CRITICAL 86
Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.99032 · Published 2014-04-30 · Partial fix · 1.9.4 CWE-20
