Test ID:	1.3.6.1.4.1.25623.1.0.813062
Category:	Denial of Service
Title:	Apache Struts Security Update (S2-056)
Summary:	Apache Struts is prone to a denial of service (DoS); vulnerability.
Description:	Summary: Apache Struts is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to REST Plugin which is using XStream library which is vulnerable and allow to perform a DoS attack when using a malicious request with specially crafted XML payload. Vulnerability Impact: Successful exploitation will allow attacker to perform a DoS attack when using a malicious request with specially crafted XML payload. Affected Software/OS: Apache Struts 2.1.1 through 2.5.14.1. Solution: Update to version 2.5.16 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1327 BugTraq ID: 103516 http://www.securityfocus.com/bid/103516 https://cwiki.apache.org/confluence/display/WW/S2-056 https://lists.apache.org/thread.html/r02c2d634fa74209d941c90f9a4cd36a6f12366ca65f9b90446ff2de3@%3Cissues.struts.apache.org%3E https://lists.apache.org/thread.html/rf482c101a88445d73cc2e89dbf7f16ae00a4aa79a544a1e72b2326db@%3Cissues.struts.apache.org%3E http://www.securitytracker.com/id/1040575
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.