Vulnerability Bulletins |
IBM Security Bulletin: Multiple IBM InfoSphere Information Server components are vulnerable due to ClassLoader manipulation vulnerability in Open Source Apache Struts version 1 (CVE-2014-0114) |
|
| Affected software | IBM |
|
Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by the failure to restrict the setting of Class Loader attributes. An attacker could exploit this vulnerability using the class parameter of an ActionForm object to manipulate the ClassLoader and execute arbitrary code on the system. IBM Information Server and constituent products are impacted. CVE(s): CVE-2014-0114 Affected product(s) and affected version(s): IBM InfoSphere Information Server More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_ibm_infosphere_information_server_components_are_vulnerable_due_to_classloader_manipulation_vulnerability_in_open_source_apache_struts_version_1_cve_2014_0114?lang=e |
|