Vulnerability Bulletins |
IBM Security Bulletin: Apache Commons Collections affects Cúram Social Program Management (CVE-2015-7450) |
|
| Affected software | IBM |
|
Cúram SPM uses the Apache Commons Collections Library. Apache Commons Collections could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of data with Java InvokerTransformer class. By sending specially crafted data, an attacker could exploit this vulnerability to execute arbitrary Java code on the system. CVE(s): CVE-2015-7450 Affected product(s) and affected version(s): IBM Cúram Social Program Management 5.2 IBM Cúram More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_apache_commons_collections_affects_c%25c3%25baram_social_program_management_cve_2015_7450?lang=en_us |
|