Test ID:	1.3.6.1.4.1.25623.1.0.103883
Category:	Web application abuses
Title:	Apache Archiva <= 1.3.6 Multiple RCE Vulnerabilities - Active Check
Summary:	Apache Archiva is prone to multiple remote command execution; (RCE) vulnerabilities in Apache Struts2.
Description:	Summary: Apache Archiva is prone to multiple remote command execution (RCE) vulnerabilities in Apache Struts2. Vulnerability Insight: Apache Archiva use Apache Struts2: In Struts 2 before 2.3.15.1 the information following 'action:', 'redirect:' or 'redirectAction:' is not properly sanitized. Since said information will be evaluated as OGNL expression against the value stack, this introduces the possibility to inject server side code. Vulnerability Impact: Successful exploits will allow remote attackers to execute arbitrary commands within the context of the affected application. Affected Software/OS: Apache Archiva version 1.3.6 and prior is known to be affected. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2251 1029184 http://www.securitytracker.com/id/1029184 1032916 http://www.securitytracker.com/id/1032916 20131013 Apache Software Foundation A Subsite Remote command execution http://seclists.org/fulldisclosure/2013/Oct/96 20131023 Apache Struts 2 Command Execution Vulnerability in Multiple Cisco Products http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-struts2 61189 http://www.securityfocus.com/bid/61189 64758 http://www.securityfocus.com/bid/64758 98445 http://osvdb.org/98445 [oss-security] 20140114 Re: CVE Request: Apache Archiva Remote Command Execution 0day http://seclists.org/oss-sec/2014/q1/89 apache-archiva-ognl-command-exec(90392) https://exchange.xforce.ibmcloud.com/vulnerabilities/90392 http://archiva.apache.org/security.html http://cxsecurity.com/issue/WLB-2014010087 http://packetstormsecurity.com/files/159629/Apache-Struts-2-Remote-Code-Execution.html http://struts.apache.org/release/2.3.x/docs/s2-016.html http://www.fujitsu.com/global/support/software/security/products-f/interstage-bpm-analytics-201301e.html http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.