RHSA-2014:0500High

Red Hat Security Advisory: struts security update

Published
May 14, 2014
Last Modified
November 3, 2026

🔗 CVE IDs covered (1)

CVE-2014-0114 →

📋 Description

CVE-2014-0114 — 1: Class Loader manipulation via request parameters

🎯 Affected products21

  • Red Hat Satellite 5.4 (RHEL v.6)
  • Red Hat Satellite 5.5 (RHEL v.6)
  • Red Hat Satellite 5.6 (RHEL v.6)
  • struts-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.4 (RHEL v.6)
  • struts-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.5 (RHEL v.6)
  • struts-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • struts-0:1.3.10-6.ep5.el6.src as a component of Red Hat Satellite 5.4 (RHEL v.6)
  • struts-0:1.3.10-6.ep5.el6.src as a component of Red Hat Satellite 5.5 (RHEL v.6)
  • struts-0:1.3.10-6.ep5.el6.src as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • struts-core-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.4 (RHEL v.6)
  • struts-core-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.5 (RHEL v.6)
  • struts-core-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • struts-extras-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.4 (RHEL v.6)
  • struts-extras-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.5 (RHEL v.6)
  • struts-extras-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • struts-taglib-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.4 (RHEL v.6)
  • struts-taglib-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.5 (RHEL v.6)
  • struts-taglib-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.6 (RHEL v.6)
  • struts-tiles-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.4 (RHEL v.6)
  • struts-tiles-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.5 (RHEL v.6)
  • struts-tiles-0:1.3.10-6.ep5.el6.noarch as a component of Red Hat Satellite 5.6 (RHEL v.6)

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 Workaround: http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Protect-your-Struts1-applications/ba-p/6463188#.VCaGk3V53Ua

🔗 References (4)