KB Article #178498

Why is there no impact to VA from CVE-2017-5638?

Problem

VA uses Apache. Is VA affected by the Apache Struts vulnerability CVE-2017-5638?

Resolution

No, Apache Struts is not a component of VA and there is no impact. We use the Apache web server, not the Apache Struts framework. Accordingly, there is no impact to VA from CVE-2017-5638.

Still need help?

If this information wasn't helpful to you, just drop us a line. We'll get back to you as soon as possible.