{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-06-07T00:00:00", "descriptions": [{"lang": "en", "value": "ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multipart request, a related issue to CVE-2015-0899."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-07-15T02:22:53", "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert"}, "references": [{"name": "JVNDB-2016-000096", "tags": ["third-party-advisory", "x_refsource_JVNDB"], "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2016-000096"}, {"name": "91068", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/91068"}, {"name": "1036056", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1036056"}, {"name": "JVN#03188560", "tags": ["third-party-advisory", "x_refsource_JVN"], "url": "http://jvn.jp/en/jp/JVN03188560/index.html"}, {"name": "91787", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/91787"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"}, {"tags": ["x_refsource_MISC"], "url": "https://www.oracle.com/security-alerts/cpujul2020.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"}, {"tags": ["x_refsource_MISC"], "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"}, {"tags": ["x_refsource_MISC"], "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"}, {"tags": ["x_refsource_MISC"], "url": "https://www.oracle.com/security-alerts/cpujan2020.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://security.netapp.com/advisory/ntap-20180629-0006/"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://github.com/kawasima/struts1-forever/commit/eda3a79907ed8fcb0387a0496d0cb14332f250e8"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343538"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://security-tracker.debian.org/tracker/CVE-2016-1181"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2016-1181", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multipart request, a related issue to CVE-2015-0899."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "JVNDB-2016-000096", "refsource": "JVNDB", "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2016-000096"}, {"name": "91068", "refsource": "BID", "url": "http://www.securityfocus.com/bid/91068"}, {"name": "1036056", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1036056"}, {"name": "JVN#03188560", "refsource": "JVN", "url": "http://jvn.jp/en/jp/JVN03188560/index.html"}, {"name": "91787", "refsource": "BID", "url": "http://www.securityfocus.com/bid/91787"}, {"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"}, {"name": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"}, {"name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"}, {"name": "https://www.oracle.com/security-alerts/cpujul2020.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpujul2020.html"}, {"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"}, {"name": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html", "refsource": "CONFIRM", "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"}, {"name": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html", "refsource": "MISC", "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"}, {"name": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html", "refsource": "MISC", "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"}, {"name": "https://www.oracle.com/security-alerts/cpujan2020.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpujan2020.html"}, {"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"}, {"name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"}, {"name": "https://security.netapp.com/advisory/ntap-20180629-0006/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20180629-0006/"}, {"name": "https://github.com/kawasima/struts1-forever/commit/eda3a79907ed8fcb0387a0496d0cb14332f250e8", "refsource": "CONFIRM", "url": "https://github.com/kawasima/struts1-forever/commit/eda3a79907ed8fcb0387a0496d0cb14332f250e8"}, {"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1343538", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343538"}, {"name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"}, {"name": "https://security-tracker.debian.org/tracker/CVE-2016-1181", "refsource": "CONFIRM", "url": "https://security-tracker.debian.org/tracker/CVE-2016-1181"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T22:48:13.522Z"}, "title": "CVE Program Container", "references": [{"name": "JVNDB-2016-000096", "tags": ["third-party-advisory", "x_refsource_JVNDB", "x_transferred"], "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2016-000096"}, {"name": "91068", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/91068"}, {"name": "1036056", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1036056"}, {"name": "JVN#03188560", "tags": ["third-party-advisory", "x_refsource_JVN", "x_transferred"], "url": "http://jvn.jp/en/jp/JVN03188560/index.html"}, {"name": "91787", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/91787"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.oracle.com/security-alerts/cpujul2020.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.oracle.com/security-alerts/cpujan2020.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://security.netapp.com/advisory/ntap-20180629-0006/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/kawasima/struts1-forever/commit/eda3a79907ed8fcb0387a0496d0cb14332f250e8"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343538"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://security-tracker.debian.org/tracker/CVE-2016-1181"}]}]}, "cveMetadata": {"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "assignerShortName": "jpcert", "cveId": "CVE-2016-1181", "datePublished": "2016-07-04T22:00:00", "dateReserved": "2015-12-26T00:00:00", "dateUpdated": "2024-08-05T22:48:13.522Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:oracle:banking_platform:2.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "653CDB2C-E0B6-4BEF-A725-3C74BFC2BA0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "C2BEE49E-A5AA-42D3-B422-460454505480", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:banking_platform:2.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "F4FF66F7-10C8-4A1C-910A-EF7D12A4284C", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:banking_platform:2.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "35AD0C07-9688-4397-8D45-FBB88C0F0C11", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:portal:11.1.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "DE543F18-45AE-4C8B-A953-0CC7C0F10461", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apache:struts:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "A5051228-446E-461D-9B5F-8F765C7BA57F", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.0:beta1:*:*:*:*:*:*", "matchCriteriaId": "32FFABC1-74F8-414A-BCC7-7CDC7EB078F1", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "1239ED60-1581-4FFB-A5FB-4FB898C1EBDA", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.0:beta3:*:*:*:*:*:*", "matchCriteriaId": "08266BA4-A365-4187-AC98-230E040B3B8C", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "709E6CEB-461C-4C6C-A3E9-CC37E3AE9E58", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "EE1B8A83-43A4-4C4F-BB95-4D9CAD882D1C", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.1:*:*:*:*:*:*:*", "matchCriteriaId": "A55DDFE1-A8AB-47BB-903E-957FCF3D023D", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.1:b1:*:*:*:*:*:*", "matchCriteriaId": "93FA9AE3-B453-4FE6-82A9-7DDEF3F6C464", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.1:b2:*:*:*:*:*:*", "matchCriteriaId": "A3BB6FBE-469B-4920-A30B-33AD9E41ACCD", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.1:b3:*:*:*:*:*:*", "matchCriteriaId": "34FC82D3-CCAF-4F37-B531-2A9CA17311A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "E0B8B413-8C62-44B6-A382-26F35F4573D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "6309C679-890A-4214-8857-9F119CBBAA00", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "241A8B39-643B-4371-B629-1636F24DDC97", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "4EE7EF4C-CD6F-4B74-89E3-321706B733FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "CD882860-03D0-49E9-8CED-DE6663392548", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "95087298-38D2-4ED6-9D99-494AE90F6DE2", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "EDDD509E-9EBF-483F-9546-A1A3A1A3380E", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "15BD4B0B-31A2-4DA3-814A-5C959D1BC64A", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "B2ECF5E1-457F-4E76-81F7-65114DC4E1E4", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "2FC81E1A-2779-4FAF-866C-970752CD1828", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "CBD69FAE-C1A3-4213-824A-7DCCE357EB01", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.2.9:*:*:*:*:*:*:*", "matchCriteriaId": "9C34FDB0-2778-4C36-8345-F7E27509A383", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.3.5:*:*:*:*:*:*:*", "matchCriteriaId": "CF0302D3-CB8D-4FA7-8F07-C2C7593877BE", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "8FC3685E-CC47-479D-A418-065ADB38EDD5", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.3.7:*:*:*:*:*:*:*", "matchCriteriaId": "805A4E32-2447-49BB-8631-E41DAA221E10", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.3.8:*:*:*:*:*:*:*", "matchCriteriaId": "03906D34-F3B3-4C56-A6A6-2F7A10168501", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.3.9:*:*:*:*:*:*:*", "matchCriteriaId": "91CBFC67-BDD8-4579-843A-F93A2661B032", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:struts:1.3.10:*:*:*:*:*:*:*", "matchCriteriaId": "1B3872B7-2972-433D-96A1-154FA545B311", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multipart request, a related issue to CVE-2015-0899."}, {"lang": "es", "value": "ActionServlet.java en Apache Struts 1 1.x hasta la versi\u00f3n 1.3.10 no maneja adecuadamente accesos multihilo para una instancia ActionForm, lo que permite a atacantes remotos ejecutar c\u00f3digo arbitrario o provocar una denegaci\u00f3n de servicio (acceso inesperado a memoria) a trav\u00e9s de una solicitud multiparte, un problema relacionado con CVE-2015-0899."}], "id": "CVE-2016-1181", "lastModified": "2024-11-21T02:45:54.383", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "[email protected]", "type": "Primary"}]}, "published": "2016-07-04T22:59:01.617", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://jvn.jp/en/jp/JVN03188560/index.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry", "Vendor Advisory"], "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2016-000096"}, {"source": "[email protected]", "tags": ["Patch"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"}, {"source": "[email protected]", "tags": ["Patch", "Third Party Advisory"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"}, {"source": "[email protected]", "tags": ["Patch"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"}, {"source": "[email protected]", "tags": ["Patch"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"}, {"source": "[email protected]", "tags": ["Patch", "Third Party Advisory"], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"}, {"source": "[email protected]", "tags": ["Patch"], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"}, {"source": "[email protected]", "tags": ["Patch"], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/91068"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/91787"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1036056"}, {"source": "[email protected]", "tags": ["Issue Tracking"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343538"}, {"source": "[email protected]", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/kawasima/struts1-forever/commit/eda3a79907ed8fcb0387a0496d0cb14332f250e8"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://security-tracker.debian.org/tracker/CVE-2016-1181"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20180629-0006/"}, {"source": "[email protected]", "url": "https://www.oracle.com/security-alerts/cpujan2020.html"}, {"source": "[email protected]", "url": "https://www.oracle.com/security-alerts/cpujul2020.html"}, {"source": "[email protected]", "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"}, {"source": "[email protected]", "tags": ["Patch"], "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"}, {"source": "[email protected]", "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://jvn.jp/en/jp/JVN03188560/index.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry", "Vendor Advisory"], "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2016-000096"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/91068"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/91787"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1036056"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343538"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/kawasima/struts1-forever/commit/eda3a79907ed8fcb0387a0496d0cb14332f250e8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security-tracker.debian.org/tracker/CVE-2016-1181"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20180629-0006/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.oracle.com/security-alerts/cpujan2020.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.oracle.com/security-alerts/cpujul2020.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "[email protected]", "type": "Primary"}]}

{"bugzilla": {"description": "struts: Vulnerability in ActionForm allows unintended remote operations against components on server memory", "id": "1343538", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343538"}, "csaw": false, "cvss": {"cvss_base_score": "6.8", "cvss_scoring_vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "status": "draft"}, "details": ["ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multipart request, a related issue to CVE-2015-0899."], "name": "CVE-2016-1181", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Will not fix", "package_name": "struts", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_web_server:2", "fix_state": "Not affected", "package_name": "struts", "product_name": "Red Hat JBoss Enterprise Web Server 2"}, {"cpe": "cpe:/a:redhat:network_satellite:5", "fix_state": "Will not fix", "package_name": "struts", "product_name": "Red Hat Satellite 5"}], "public_date": "2016-06-07T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2016-1181\nhttps://nvd.nist.gov/vuln/detail/CVE-2016-1181\nhttps://jvn.jp/en/jp/JVN03188560/"], "statement": "This issue affects the version of struts shipped with Red Hat Enterprise Linux 5, which is currently in Extended Life Phase. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification https://access.redhat.com/security/updates/classification/ and the Red Hat Enterprise Linux Life Cycle https://access.redhat.com/support/policy/updates/errata/.", "threat_severity": "Important"}