Candidate: CVE-2015-0899
PublicDate: 2016-07-04 22:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0899
 http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000042.html
 https://jvn.jp/en/jp/JVN86448949/index.html
 http://en.sourceforge.jp/projects/terasoluna/wiki/StrutsPatch2-EN
Description:
 The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10
 allows remote attackers to bypass intended access restrictions via a
 modified page parameter.
Ubuntu-Description:
Notes:
Bugs:
 https://bugzilla.redhat.com/show_bug.cgi?id=1207099
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N [7.5 HIGH]

Patches_libstruts1.2-java:
upstream_libstruts1.2-java: needed
lucid_libstruts1.2-java: ignored (reached end-of-life)
precise_libstruts1.2-java: released (1.2.9-5+deb7u2build0.12.04.1)
precise/esm_libstruts1.2-java: DNE (precise was released [1.2.9-5+deb7u2build0.12.04.1])
trusty_libstruts1.2-java: ignored (reached end-of-life)
trusty/esm_libstruts1.2-java: DNE (trusty was needed)
utopic_libstruts1.2-java: ignored (reached end-of-life)
vivid_libstruts1.2-java: DNE
vivid/stable-phone-overlay_libstruts1.2-java: DNE
vivid/ubuntu-core_libstruts1.2-java: DNE
wily_libstruts1.2-java: DNE
xenial_libstruts1.2-java: DNE
yakkety_libstruts1.2-java: DNE
zesty_libstruts1.2-java: DNE
artful_libstruts1.2-java: DNE
bionic_libstruts1.2-java: DNE
cosmic_libstruts1.2-java: DNE
disco_libstruts1.2-java: DNE
devel_libstruts1.2-java: DNE