Podatność CVE-2010-1622

Podatność CVE-2010-1622

Publikacja: 2010-06-21 Modyfikacja: 2012-02-13

Opis:

	Tytuł	Autor	Data
Med.	Spring Framework 3.0.2 execution of arbitrary code	s2-security	23.06.2010

Typ:

(Improper Control of Generation of Code ('Code Injection'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
6/10	6.4/10	6.8/10

Affected software
Springsource -> Spring framework
Oracle -> Fusion middleware

http://geronimo.apache.org/2010/07/21/apache-geronimo-v216-released.html

http://geronimo.apache.org/21x-security-report.html

http://geronimo.apache.org/22x-security-report.html

http://www.exploit-db.com/exploits/13918

http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html

http://www.redhat.com/support/errata/RHSA-2011-0175.html

http://www.securityfocus.com/archive/1/511877

http://www.securityfocus.com/bid/40954

http://www.securitytracker.com/id/1033898

http://www.springsource.com/security/cve-2010-1622

http://www.vupen.com/english/advisories/2011/0237