Got it

Huawei Enterprise Support Community

Community Forums Servers

Apache Struts S2-016 Remo...

Apache Struts S2-016 Remote Command Injection - iBMC Web UI

Created: Nov 3, 2020 17:30:41Latest reply: Nov 4, 2020 00:39:40 411 1 0 0 0

HiCoins as reward： 0 (problem unresolved)

View the author ^1#

Hi All,

Our customer did Penetration test on iBMC Web UI of 2288H V5 server. And they detected "Apache Struts S2-016 Remote Command Injection" vulnerability.

How can we resolve this issue and pass the penetration test?

I checked several Huawei page, but couldn't find exact solution.

https://www.huawei.com/en/psirt/security-advisories/hw-276819

Our iBMC firmware version is;

ibmc_firmware1

ibmc_firmware2

x
convention：
Emotion(0)

Like (0) Dislike (0) Favorite(0) Report

 Previous: ARP request

Next: Network Transmission

Featured Answers

Recommended answer

(0) (0)

stephen.xu Admin Created Nov 4, 2020 00:39:40

Hello, fatihozel2.

As mentioned in the notice, this issue has not been fixed for the 2288H V5 server.

You are advised to contact PSIRT@huawei.com.

contact

View more

x
convention：

All Answers

(0) (0)

^2#

stephen.xu Admin Created Nov 4, 2020 00:39:40

Hello, fatihozel2.

As mentioned in the notice, this issue has not been fixed for the 2288H V5 server.

You are advised to contact PSIRT@huawei.com.

contact

View more

x
convention：

Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:

Politically sensitive content
Content concerning pornography, gambling, and drug abuse
Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy

Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.

Please bind your phone number to obtain invitation bonus.