Vulnerability Bulletins |
IBM Security Bulletin: Open Source Apache Struts V1 ClassLoader manipulation vulnerability (CVE-2014-0114) in IBM Web Interface for Content Management (WEBi) |
|
| Affected software | IBM |
|
Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by the failure to restrict the setting of Class Loader attributes. An attacker could exploit this vulnerability using the class parameter of an ActionForm object to manipulate the ClassLoader and execute arbitrary code on the system. CVE(s): CVE-2014-0114 Affected product(s) and affected version(s): WEB interface for Content Management (WEBi) v1.0.4 Refer to the following reference URLs for More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_open_source_apache_struts_v1_classloader_manipulation_vulnerability_cve_2014_0114_in_ibm_web_interface_for_content_management_webi?lang=en_us |
|