RULE(RULE ID:306696)

Rule General Information
Release Date: 2015-08-20
Rule Name: WEB-SERVER Apache Struts FilterDispatcher and DefaultStaticContentLoader Classes directory traversal -1
Severity:
CVE ID:
Rule Protection Details
Description: An error in the "FilterDispatcher" and "DefaultStaticContentLoader" classes can be exploited to download arbitrary files via directory traversal sequences.
Impact: Remote code execution
Affected OS: Others
Reference: SecurityAdvisory:SA32497
Solutions
Update vendor's patch.