Red Hat Security AdvisoryRHSA-2014:0500
struts security update
Released 2014-05-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 5.4 (RHEL v.6) struts-1.3.10-6.ep5.el6, struts-core-1.3.10-6.ep5.el6, struts-extras-1.3.10-6.ep5.el6 +2
- Red Hat Satellite 5.5 (RHEL v.6) struts-1.3.10-6.ep5.el6, struts-core-1.3.10-6.ep5.el6, struts-extras-1.3.10-6.ep5.el6 +2
- Red Hat Satellite 5.6 (RHEL v.6) struts-1.3.10-6.ep5.el6, struts-core-1.3.10-6.ep5.el6, struts-extras-1.3.10-6.ep5.el6 +2
Fixes 1 record
Priority CRITICAL 86
Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.99032 · Published 2014-04-30 · Partial fix · 1.9.4 CWE-20
