Vulnerability Bulletins

IBM Security Bulletin: ClassLoader manipulation with Apache Struts affecting Tivoli Storage Productivity Center (CVE-2014-0114)

   
Affected software IBM
 
There is a ClassLoader manipulation vulnerability in Apache Struts that is used by Tivoli Integrated Portal (TIP) and its embedded WebSphere Application Server (eWAS). This vulnerability only affects Tivoli Integrated Portal and does not affect other areas of Tivoli Storage Productivity Center or other instances of embedded WebSphere Application Server within it. CVE(s): CVE-2014-0114 Affected product(s) and affected version(s): Tivoli Integrated Portal (TIP) version 1.x and version 2.x,

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_classloader_manipulation_with_apache_struts_affecting_tivoli_storage_productivity_center_cve_2014_0114?lang=en_us