CVE-2017-9805

Summary

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloads.

Affected Software

Weaknesses

• RCE

ADP Enrichment

CVE Program Container

Additional References

• http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html
• https://struts.apache.org/docs/s2-052.html
• http://www.securitytracker.com/id/1039263
• http://www.securityfocus.com/bid/100609
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2
• https://bugzilla.redhat.com/show_bug.cgi?id=1488482
• https://blogs.apache.org/foundation/entry/apache-struts-statement-on-equifax
• https://www.exploit-db.com/exploits/42627/
• https://lgtm.com/blog/apache_struts_CVE-2017-9805
• https://cwiki.apache.org/confluence/display/WW/S2-052
• https://security.netapp.com/advisory/ntap-20170907-0001/
• https://www.kb.cert.org/vuls/id/112992

CISA ADP Vulnrichment

• SSVC:
• Exploitation: active
  • Automatable: no
  • Technical Impact: total

Additional References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-9805

References

• http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html
• https://struts.apache.org/docs/s2-052.html
• http://www.securitytracker.com/id/1039263
• http://www.securityfocus.com/bid/100609
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2
• https://bugzilla.redhat.com/show_bug.cgi?id=1488482
• https://blogs.apache.org/foundation/entry/apache-struts-statement-on-equifax
• https://www.exploit-db.com/exploits/42627/
• https://lgtm.com/blog/apache_struts_CVE-2017-9805
• https://cwiki.apache.org/confluence/display/WW/S2-052
• https://security.netapp.com/advisory/ntap-20170907-0001/
• https://www.kb.cert.org/vuls/id/112992

• ←Previous
• Next→