Vulnerability found in Apache struts2-core-2.5.22 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections
CVEID:CVE-2020-17530
**DESCRIPTION:**Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by a forced double OGNL evaluation on raw user input in tag attributes. By sending specially crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system.
CVSS Base score: 8.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/192743 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected Product(s) | Version(s) |
---|---|
Content Collector for File Systems | 4.0.x |
Product | VRM | Remediation |
---|---|---|
Content Collector for Email | 4.0.1 |
Use Content Collector for Email 4.0.1.14-IBM-ICC-IF004
Content Collector for File Systems| 4.0.1| Use Content Collector for File Systems 4.0.1.14-IBM-ICC-IF004
Content Collector for Microsoft SharePoint| 4.0.1| Use Content Collector for Microsoft SharePoint 4.0.1.14-IBM-ICC-IF004
Content Collector for IBM Connections| 4.0.1| Use Content Collector for IBM Connections 4.0.1.14-IBM-ICC-IF004
None
CPE | Name | Operator | Version |
---|---|---|---|
content collector | eq | 4.0.1 |