Vulnerability Bulletins |
IBM Security Bulletin: Vulnerability in Apache Commons affects IBM SPSS Modeler (CVE-2015-7450) |
|
| Affected software | IBM |
|
Apache Commons Collections could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of data with Java InvokerTransformer class. By sending specially crafted data, an attacker could exploit this vulnerability to execute arbitrary Java code on the system. CVE(s): CVE-2015-7450 Affected product(s) and affected version(s): IBM SPSS Modeler 14.2 FP3 IF026 and earlier IBM SPSS Modeler 15 FP3 IF014 and earlier IBM SPSS Modeler 16 FP2 IF010 and More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerability_in_apache_commons_affects_ibm_spss_modeler_cve_2015_7450?lang=en_us |
|