ByteOS Network

NVD Vulnerability Details :

CVE-2014-0094

Deferred

Source-secalert@redhat.com

Published At-11 Mar, 2014 | 13:00

Updated At-12 Apr, 2025 | 10:46

The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N

CPE Matches

The Apache Software Foundation

>>struts>>Versions from 2.0.0(inclusive) to 2.3.16.1(exclusive)

cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://jvn.jp/en/jp/JVN19294237/index.html	secalert@redhat.com	Third Party Advisory VDB Entry
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000045	secalert@redhat.com	Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html	secalert@redhat.com	Third Party Advisory VDB Entry
http://secunia.com/advisories/56440	secalert@redhat.com	Vendor Advisory
http://secunia.com/advisories/59178	secalert@redhat.com	Permissions Required
http://struts.apache.org/release/2.3.x/docs/s2-020.html	secalert@redhat.com	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676706	secalert@redhat.com	Third Party Advisory
http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm	secalert@redhat.com	Third Party Advisory
http://www.konakart.com/downloads/ver-7-3-0-0-whats-new	secalert@redhat.com	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html	secalert@redhat.com	Third Party Advisory
http://www.securityfocus.com/archive/1/531362/100/0/threaded	secalert@redhat.com	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/532549/100/0/threaded	secalert@redhat.com	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/65999	secalert@redhat.com	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1029876	secalert@redhat.com	Third Party Advisory VDB Entry
http://www.vmware.com/security/advisories/VMSA-2014-0007.html	secalert@redhat.com	Third Party Advisory
http://jvn.jp/en/jp/JVN19294237/index.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000045	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://secunia.com/advisories/56440	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/59178	af854a3a-2127-422b-91ae-364da2661108	Permissions Required
http://struts.apache.org/release/2.3.x/docs/s2-020.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676706	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.konakart.com/downloads/ver-7-3-0-0-whats-new	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.securityfocus.com/archive/1/531362/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/532549/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/65999	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1029876	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.vmware.com/security/advisories/VMSA-2014-0007.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History