{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Struts versions 2.0.0 \u00e0 2.1.8.1 ;","product":{"name":"Struts","vendor":{"name":"Apache","scada":false}}},{"description":"VMware vCenter Orchestrator 4.0 et 4.1.","product":{"name":"N/A","vendor":{"name":"VMware","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nUne erreur dans l'\u00e9valuation des param\u00e8tres des requ\u00eates au serveur par\nle module XWork, inclus dans Struts, permet \u00e0 un attaquant d'ex\u00e9cuter du\ncode arbitraire \u00e0 distance. Cette vuln\u00e9rabilit\u00e9 affecte \u00e9galement le\nlogiciel VMware vCenter Orchestrator.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2010-1870","url":"https://www.cve.org/CVERecord?id=CVE-2010-1870"}],"links":[{"title":"Article KB de Vmware 1034175 du 16 mars 2011 :","url":"http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1034175"}],"reference":"CERTA-2011-AVI-011","revisions":[{"description":"version initiale.","revision_date":"2011-01-12T00:00:00.000000"},{"description":"ajout des r\u00e9f\u00e9rences concernant VMware vCO.","revision_date":"2011-03-17T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"}],"summary":"Une vuln\u00e9rabilit\u00e9 dans <span class=\"textit\">Struts</span> version 2\npermet \u00e0 un attaquant d'ex\u00e9cuter du code Java \u00e0 distance.\n","title":"Vuln\u00e9rabilit\u00e9 dans Struts","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Apache Struts S2-005 du 16 Ao\u00fbt 2010","url":"http://struts.apache.org/2.2.1/docs/s2-005.html"},{"published_at":null,"title":"Article KB de VMware 1034175 du 16 mars 2011","url":null}]}