Vulnerability Bulletins

IBM Security Bulletin: ClassLoader manipulation with Apache Struts affecting IBM Records Manager, IBM Content Manager Records Enabler and WebSphere Application Server shipped with IBM Records Manager

   
Affected software IBM
 
There is a ClassLoader manipulation vulnerability in Apache Struts that is used by IBM Records Manager and IBM Content Manager Records Enabler. The security vulnerability has also been identified in WebSphere Application Server shipped with IBM Records Manager. CVE(s): CVE-2014-0114 Affected product(s) and affected version(s): Affected Principle Products and Versions Affected Supporting Product and Versions IBM Records Manager Version 8.4 WebSphere Application Server Version 6.1

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_classloader_manipulation_with_apache_struts_affecting_ibm_records_manager_ibm_content_manager_records_enabler_and_websphere_application_server_shipped_with_ibm_records_manage