Re: Struts Vulnerability

2017-09-07 Thread Guang Chao
On Thu, Sep 7, 2017 at 3:17 PM, Greg Huber wrote: > >2) Does Apache Struts only run on Apache Webserver and Tomcat? > > Should run on java based servers Glassfish, Websphere etc > > >3) Is there a simple way to determine if a server has Struts installed, > >instead of

Re: Struts Vulnerability

2017-09-07 Thread Greg Huber
>2) Does Apache Struts only run on Apache Webserver and Tomcat? Should run on java based servers Glassfish, Websphere etc >3) Is there a simple way to determine if a server has Struts installed, >instead of logging into each of the servers and checking the programs >list? You could try and

Re: Struts Vulnerability

2017-09-07 Thread Guang Chao
On Thu, Sep 7, 2017 at 7:18 AM, Sean Son wrote: > Hello all > > I am new to the mailing list as well as new to Apache Struts. We all heard > in the news about the vulnerability affecting Apache Struts. I have been > tasked to determine which of our servers have

Struts Vulnerability

2017-09-06 Thread Sean Son
Hello all I am new to the mailing list as well as new to Apache Struts. We all heard in the news about the vulnerability affecting Apache Struts. I have been tasked to determine which of our servers have Struts running on them. I have a few questions on how to determine if a server is running