On Thu, Sep 7, 2017 at 7:18 AM, Sean Son <linuxmailinglistsem...@gmail.com> wrote:
> Hello all > > I am new to the mailing list as well as new to Apache Struts. We all heard > in the news about the vulnerability affecting Apache Struts. I have been > tasked to determine which of our servers have Struts running on them. I > have a few questions on how to determine if a server is running Struts or > not: > > 1) How does one determine if a Windows server, running IIS, has the Apache > Struts framework installed on it? > > 2) Does Apache Struts only run on Apache Webserver and Tomcat? > > 3) Is there a simple way to determine if a server has Struts installed, > instead of logging into each of the servers and checking the programs list? > > > I appreciate ALL help! > You can try to search the file system for struts jar. Btw, it seems only struts 2 are affected by the issue -- Guang <http://javadevnotes.com/java-integer-to-string-with-leading-zeros/>
