Apache Struts ClassLoader Manipulation CVE-2014-0114 Security Bypass Vulnerability

Bugtraq ID: 67121
Class: Design Error
CVE: CVE-2014-0114
Remote: Yes
Local: No
Published: Apr 29 2014 12:00AM
Updated: Jul 23 2014 06:09PM
Credit: Rene Gielen
Vulnerable: RedHat Enterprise Linux Desktop Workstation 5 client
Red Hat Network Satellite Server (for RHEL 6) 5.4
Red Hat Enterprise Linux 5 Server
Oracle Enterprise Linux 5
MandrakeSoft Enterprise Server 5 x86_64
MandrakeSoft Enterprise Server 5
IBM WebSphere Service Registry and Repository 7.5
IBM WebSphere Service Registry and Repository 7.0
IBM WebSphere Service Registry and Repository 6.3
IBM WebSphere Sensor Events 7.0
IBM WebSphere Lombardi Edition 7.2
IBM WebSphere Enterprise Service Bus 7
IBM Websphere Application Server 8.0 2
IBM Websphere Application Server 7.0 21
IBM Websphere Application Server 8.0
IBM Websphere Application Server 7.0.0.23
IBM Websphere Application Server 7.0.0.19
IBM Websphere Application Server 7.0.0.17
IBM Websphere Application Server 7.0.0.15
IBM Websphere Application Server 7.0.0.13
IBM Websphere Application Server 7.0
IBM Websphere Application Server 6.1.0.45
IBM Websphere Application Server 6.1.0.43
IBM Websphere Application Server 6.1.0.39
IBM Websphere Application Server 6.1.0.37
IBM Websphere Application Server 6.1.0.35
IBM Websphere Application Server 6.1.0.34
IBM Websphere Application Server 6.1.0.33
IBM Websphere Application Server 6.1.0.31
IBM Websphere Application Server 6.1
IBM WEB Interface for Content Management 1.0.4
IBM Tivoli Storage Productivity Center 4.2.1
IBM Tivoli Integrated Portal 1.1.1 15
IBM Tivoli Integrated Portal 1.1.1 14
IBM Tivoli Identity Manager 5.0
IBM Tivoli Foundations for Application Manager 1.2
IBM Tivoli Composite Application Manager for Websphere 6.1
IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0
IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.2
IBM Rational Application Developer 7.0
IBM InfoSphere Information Server 8.5
IBM InfoSphere Information Server 8.1
IBM InfoSphere Information Server 8.0
IBM Application Manager for Smart Business 1.2.1
Hitachi Tuning Manager Software 7.0 01 (Windows)
Hitachi Tuning Manager Software 7.0 01 (Solaris(SPARC))
Hitachi Tuning Manager Software 7.0 (Windows)
Hitachi Tuning Manager Software 7.0 (Solaris(SPARC))
Hitachi Tuning Manager Software 6.4 02 (Windows)
Hitachi Tuning Manager Software 6.4 02 (Solaris(SPARC))
Hitachi Tuning Manager Software 6.4 01 (Windows)
Hitachi Tuning Manager Software 6.4 01 (Solaris(SPARC))
Hitachi Tuning Manager Software 6.2 -01 (Windows)
Hitachi Tuning Manager Software 6.2 -01 (Solaris(SPARC))
Hitachi Tuning Manager Software 6.2 -00 (Windows)
Hitachi Tuning Manager Software 6.2 -00 (Solaris(SPARC))
Hitachi Tuning Manager Software 6.1 -00 (Windows)
Hitachi Tuning Manager Software 6.1 -00 (Solaris(SPARC))
Hitachi Tuning Manager Software 6.0 (Windows)
Hitachi Tuning Manager Software 6.0 (Solaris(SPARC))
Hitachi Tuning Manager Software 7.1.0-00 (Windows)
Hitachi Tuning Manager Software 6.4.0-03 (Windows)
Hitachi Tuning Manager Software 6.4.0-03 (Solaris(SP
Hitachi Tiered Storage Manager Software 6.2 -01 (Windows)
Hitachi Tiered Storage Manager Software 6.2 -01 (Solaris(x64))
Hitachi Tiered Storage Manager Software 6.2 -01 (Solaris(SPARC))
Hitachi Tiered Storage Manager Software 6.2 -00 (Windows)
Hitachi Tiered Storage Manager Software 6.2 -00 (Solaris(x64))
Hitachi Tiered Storage Manager Software 6.2 -00 (Solaris(SPARC))
Hitachi Tiered Storage Manager Software 6.1.1 -01 (Windows)
Hitachi Tiered Storage Manager Software 6.1.1 -01 (Solaris(x64))
Hitachi Tiered Storage Manager Software 6.1.1 -01 (Solaris(SPARC))
Hitachi Tiered Storage Manager Software 6.1.1 -00 (Windows)
Hitachi Tiered Storage Manager Software 6.1.1 -00 (Solaris(x64))
Hitachi Tiered Storage Manager Software 6.1.1 -00 (Solaris(SPARC))
Hitachi Tiered Storage Manager Software 6.1 -01 (Windows)
Hitachi Tiered Storage Manager Software 6.1 -01 (Solaris(x64))
Hitachi Tiered Storage Manager Software 6.1 -01 (Solaris(SPARC))
Hitachi Tiered Storage Manager Software 6.1 -00 (Windows)
Hitachi Tiered Storage Manager Software 6.1 -00 (Solaris(x64))
Hitachi Tiered Storage Manager Software 6.1 -00 (Solaris(SPARC))
Hitachi Tiered Storage Manager Software 7.1.0-00 (Windows)
Hitachi Tiered Storage Manager Software 7.1.0-00 (Solaris(SP
Hitachi Tiered Storage Manager Software 7.1.0-00 (Linux(RHEL
Hitachi Tiered Storage Manager Software 7.0.1-02 (Windows)
Hitachi Tiered Storage Manager Software 7.0.1-02 (linux(RHEL
Hitachi Tiered Storage Manager Software 7.0.0-00 (Windows)
Hitachi Tiered Storage Manager Software 7.0.0-00 (Solaris(SP
Hitachi Tiered Storage Manager Software 7.0.0-00 (linux(RHEL
Hitachi Tiered Storage Manager Software 6.4.0-08 (Windows)
Hitachi Tiered Storage Manager Software 6.4.0-08 (Solaris(SP
Hitachi Tiered Storage Manager Software 6.4.0-08 (Linux(RHEL
Hitachi Tiered Storage Manager Software 6.4.0-07 (Windows)
Hitachi Tiered Storage Manager Software 6.4.0-07 (Solaris(SP
Hitachi Tiered Storage Manager Software 6.4.0-07 (linux(RHEL
Hitachi Tiered Storage Manager Software 6.2.0-00 (Linux(RHEL
Hitachi Tiered Storage Manager Software 6.0.0-00 (Windows)
Hitachi Tiered Storage Manager Software 6.0.0-00 (Solaris(SP
Hitachi Global Link Manager Software 6.6 -00 (Windows)
Hitachi Global Link Manager Software 6.5 -00 (Windows)
Hitachi Global Link Manager Software 6.2 -01 (Windows)
Hitachi Global Link Manager Software 6.2 -00 (Windows)
Hitachi Global Link Manager Software 6.1 -01 (Windows)
Hitachi Global Link Manager Software 6.1 -00 (Windows)
Hitachi Device Manager Software 6.2 -02 (Windows)
Hitachi Device Manager Software 6.2 -02 (Solaris(x64))
Hitachi Device Manager Software 6.2 -02 (Solaris(SPARC))
Hitachi Device Manager Software 6.2 -01 (Windows)
Hitachi Device Manager Software 6.2 -01 (Solaris(x64))
Hitachi Device Manager Software 6.2 -01 (Solaris(SPARC))
Hitachi Device Manager Software 6.2 -00 (Windows)
Hitachi Device Manager Software 6.2 -00 (Solaris(x64))
Hitachi Device Manager Software 6.2 -00 (Solaris(SPARC))
Hitachi Device Manager Software 6.1.1 -04 (Windows)
Hitachi Device Manager Software 6.1.1 -04 (Solaris(x64))
Hitachi Device Manager Software 6.1.1 -04 (Solaris(SPARC))
Hitachi Device Manager Software 6.1.1 -03 (Windows)
Hitachi Device Manager Software 6.1.1 -03 (Solaris(SPARC))
Hitachi Device Manager Software 6.1.1 -00 (Windows)
Hitachi Device Manager Software 6.1.1 -00 (Solaris(x64))
Hitachi Device Manager Software 6.1.1 -00 (Solaris(SPARC))
Hitachi Device Manager Software 6.1 -03 (Windows)
Hitachi Device Manager Software 6.1 -03 (Solaris(SPARC))
Hitachi Device Manager Software 6.1 -02 (Windows)
Hitachi Device Manager Software 6.1 -02 (Solaris(x64))
Hitachi Device Manager Software 6.1 -02 (Solaris(SPARC))
Hitachi Device Manager Software 6.1 -00 (Windows)
Hitachi Device Manager Software 6.1 -00 (Solaris(x64))
Hitachi Device Manager Software 6.1 -00 (Solaris(SPARC))
Hitachi Device Manager Software 6.0 -06 (Windows)
Hitachi Device Manager Software 6.0 -06 (Solaris(SPARC))
Hitachi Device Manager Software 6.0 -00 (Windows)
Hitachi Device Manager Software 6.0 -00 (Solaris(SPARC))
Hitachi Device Manager Software 7.1.0-00 (Windows)
Hitachi Device Manager Software 7.1.0-00 (Solaris(SP
Hitachi Device Manager Software 7.1.0-00 (Linux(RHEL
Hitachi Device Manager Software 7.0.1-02 (Windows)
Hitachi Device Manager Software 7.0.1-02 (linux(RHEL
Hitachi Device Manager Software 7.0.0-00 (Windows)
Hitachi Device Manager Software 7.0.0-00 (Solaris(SP
Hitachi Device Manager Software 7.0.0-00 (linux(RHEL
Hitachi Device Manager Software 6.4.0-08 (Windows)
Hitachi Device Manager Software 6.4.0-08 (Solaris(SP
Hitachi Device Manager Software 6.4.0-08 (Linux(RHEL
Hitachi Device Manager Software 6.4.0-07 (Windows)
Hitachi Device Manager Software 6.4.0-07 (Solaris(SP
Hitachi Device Manager Software 6.4.0-07 (linux(RHEL
CentOS CentOS 5
Apache Software Foundation Struts 1.3.10
Apache Software Foundation Struts 1.3.8
Apache Software Foundation Struts 1.3.5
Apache Software Foundation Struts 1.2.9
Apache Software Foundation Struts 1.2.8
Apache Software Foundation Struts 1.2.7
Apache Software Foundation Struts 1.2.4
Apache Software Foundation Struts 1.1
Apache Software Foundation Struts 1.0.2
Apache Software Foundation Struts 1.2.6
Apache Software Foundation Struts 1.2.2
Not Vulnerable:


 

Privacy Statement
Copyright 2010, SecurityFocus