Boletines de Vulnerabilidades

IBM Security Bulletin: Open Source Apache Struts V1 ClassLoader manipulation vulnerability (CVE-2014-0114) in IBM Web Interface for Content Management (WEBi)
Información sobre el sistema

Software afectado	IBM
Descripción
Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by the failure to restrict the setting of Class Loader attributes. An attacker could exploit this vulnerability using the class parameter of an ActionForm object to manipulate the ClassLoader and execute arbitrary code on the system. CVE(s): CVE-2014-0114 Affected product(s) and affected version(s): WEB interface for Content Management (WEBi) v1.0.4 Refer to the following reference URLs for More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_open_source_apache_struts_v1_classloader_manipulation_vulnerability_cve_2014_0114_in_ibm_web_interface_for_content_management_webi?lang=en_us
Identificadores estándar
Propiedad	Valor
CVE