struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "punter " <p_saurab...@rediffmail.com>
Subject CVE 2013-2251 not affecting Redhat shipped struts
Date Sat, 20 Feb 2016 17:21:45 GMT

Hi,
On running a security scan on my Struts project in Red hat reported CVE-2013-2251.&nbsp;This
was previously unidentified by another tool as Bugzilla reports that CVE-2013-2251 does not
affect Red hat shipped Struts.&nbsp;Link:&nbsp;https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2251But
I have installed Struts independently on Red hat as base Operating system .&nbsp;
Can you please let me know if there any difference in Apache Struts installed over Red hat
and Struts as shipped with Red hat , since CVE 2013-2251 is not affecting the latter distribution.&nbsp;

Thanks



Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message