ID de Prueba:	1.3.6.1.4.1.25623.1.0.130036
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2015-0351)
Resumen:	The remote host is missing an update for the 'struts' package(s) announced via the MGASA-2015-0351 advisory.
Descripción:	Summary: The remote host is missing an update for the 'struts' package(s) announced via the MGASA-2015-0351 advisory. Vulnerability Insight: Updated struts packages fix security vulnerability: The Validator in Apache Struts 1.1 and later contains a function to efficiently define rules for input validation across multiple pages during screen transitions. This function contains a vulnerability where input validation may be bypassed. When the Apache Struts 1 Validator is used, the web application may be vulnerable even when this function is not used explicitly (CVE-2015-0899). Affected Software/OS: 'struts' package(s) on Mageia 4, Mageia 5. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0899 BugTraq ID: 74423 http://www.securityfocus.com/bid/74423 Debian Security Information: DSA-3536 (Google Search) http://www.debian.org/security/2016/dsa-3536 http://jvn.jp/en/jp/JVN86448949/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2015-000042
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.