FortiClient VulnerabilityApache Struts CVE-2014-0116 Weak Authentication Vulnerability
Description
The excluded parameter pattern introduced in version 2.3.16.2 to block access to getClass() method didn't cover other cases and because of that attacker can change state of session, request and so on (when "*" is used to configurecookiesNameparam).
Affected Applications
Apache Struts
CVE References
CVE-2014-0116Other References
https://cwiki.apache.org/confluence/display/WW/Security+Bulletins| ID | 41611 |
| Created | Jan 17, 2020 |
| Description Updated |
Dec 14, 2023 |
| Risk |
|
| Coverage | FortiClient |
| OS | Linux |
| Vendor | Apache |
| Patch | manual |
| Application | Apache Struts |