CSCvm14030 - Evaluation of positron for Struts remote code execution vulnerability August 2018 - 3

[stranglar]

Hello,

According to the Bug Search Tool page for CSCvm14030, only devices with default configuration are affected. Could someone please enlighten me on this point ? What does it really mean ?

Thanks

Regards

[Leo Laohoo · Accepted solution]

Don't bother reading the Bug ID because it doesn't really contain anything informative.  Read the security bulletin instead:  Apache Struts Remote Code Execution Vulnerability Affecting Cisco Products: August 2018

Due to the nature of this vulnerability (and the fact that PSIRT is made aware of this exploit being used already), this security bulletin is getting regular update.

[stranglar]

Hi Leo Laohoo

Thanks for your reply :)

[stranglar]

Hi Leo

Thanks for your reply :)