Vulnerability CVE-2018-11776 - Apache - Struts

[DCIM_Support]

Hi,

I require assistance in order to solve the vulnerability CVE-2018-11776 - Apache - Struts on DCE.

(CID:134679347)

[DCIM_Support]

DCE packages does not include apache struts, refer to link below:

Software packages in StruxureWare Data Center Expert

Also, do contact your local tech support with valid support contract  to get the latest DCE 760 if you have not done so.

What's new in Data Center Expert v7.7.0

(CID:134695192)

[DCIM_Support]

Dear Andres Cordero,

Please, tell us where did you find out, that the DCE-7.x software is affected by the above mentioned vulnerability? Show the source of this information, please.

With respect.

(CID:134679608)

[DCIM_Support]

Scanning result provided for QRadar.

One customer send us the information  

(CID:134680083)

[DCIM_Support]

Dear Andres Cordero,

I would like to see this report and under what conditions it was generated?

What version of the DCE server was used?

With respect.

(CID:134680099)

[DCIM_Support]

(CID:134683593)

[DCIM_Support]

DCE version 7.5.0 

(CID:134683595)

[DCIM_Support]

Dear Andres Cordero,

Well, thanks for the detailed information.

With respect.

(CID:134683793)

[DCIM_Support]

Do you know which module is the responsable to execute the web service in DCE?

(CID:134688853)

[DCIM_Support]

Dear Andres Cordero,

Please, see my answer in topic 

With respect.

(CID:134689007)

[DCIM_Support]

Hi Andres Cordero,

Did you solve your issue?

Thanks,

Stine

(CID:134693704)

[DCIM_Support]

Yes, thanks for the help.

(CID:134694916)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.