危険度: 高
  CVE識別番号: CVE-2014-0114
  情報公開日: 7 21, 2015

  概要

The Apache Struts used by the IBM WebSphere Application Server could allow a remote attacker to execute arbitrary code on the system. An attacker could exploit this vulnerability using the class parameter of an ActionForm object to manipulate the ClassLoader and execute arbitrary code on the system.

  トレンドマイクロの対策

Apply associated Trend Micro DPI Rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1006015
  Trend Micro Deep Security DPI Rule Name: 1006015 - Restrict Apache Struts 'class.classLoader' Request

  影響を受けるソフトウェア

  • apache struts 1.0
  • apache struts 1.0.2
  • apache struts 1.1
  • apache struts 1.2.2
  • apache struts 1.2.4
  • apache struts 1.2.6
  • apache struts 1.2.7
  • apache struts 1.2.8
  • apache struts 1.2.9
  • apache struts 1.3.10
  • apache struts 1.3.5
  • apache struts 1.3.8