Detections
Analytics
Amazon Linux AMI : jakarta-taglibs-standard (ALAS-2015-595)
high Nessus Plugin ID 86073
Language:
Synopsis
The remote Amazon Linux AMI host is missing a security update.Description
It was found that the Java Standard Tag Library (JSTL) allowed the processing of untrusted XML documents to utilize external entity references, which could access resources on the host system and, potentially, allowing arbitrary code execution.Solution
Run 'yum update jakarta-taglibs-standard' to update your system.See Also
Plugin Details
Severity: High
ID: 86073
File Name: ala_ALAS-2015-595.nasl
Version: 2.5
Type: Local
Agent: unix
Published: 9/23/2015
Updated: 5/16/2018
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.9
Percentile: 52.23
CVSS v2
Risk Factor: High
Base Score: 7.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:amazon:linux:jakarta-taglibs-standard, p-cpe:/a:amazon:linux:jakarta-taglibs-standard-javadoc, cpe:/o:amazon:linux
Required KB Items: Host/local_checks_enabled, Host/AmazonLinux/release, Host/AmazonLinux/rpm-list
Patch Publication Date: 9/22/2015
Reference Information
CVE: CVE-2015-0254