Vulnerability Bulletins |
IBM Security Bulletin: InfoSphere MashupHub development editor is possibly vulnerable to Denial of Service attack (CVE-2014-0050) |
|
| Affected software | IBM |
|
A denial of service (Dos) vulnerability in the open source library Apache Commons FileUpload could be triggered by uploading a maliciously crafted document into the InfoSphere MashupHub during feed creation. Developers need to ensure that all files uploaded during feed creation are from safe, reliable sources. The InfoSphere MashupHub feed execution, runtime environment is not susceptible to this vulnerability. CVE(s): CVE-2014-0050 and CVE-20140-005 Affected product(s) and affected More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_infosphere_mashuphub_development_editor_is_possibly_vulnerable_to_denial_of_service_attack_cve_2014_0050?lang=en_us |
|