Caucho Quercus Remote Attack Vector via Overwriting SERVER Superglobal Array

Caucho Quercus Remote Attack Vector via Overwriting SERVER Superglobal Array

CVE-2012-2966 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis of POST parameters, which has unspecified impact and remote attack vectors.

Learn more about our Cis Benchmark Audit For Server Software.