IBM Security Bulletin: Vulnerabilities in Apache Struts affect the IBM FlashSystem model V9000 (CVE-2016-0785 CVE-2016-2162)

Open Source Apache Struts vulnerabilities were disclosed in March 2016. Struts is used by the IBM® FlashSystem™ V9000 in its Service Assistant GUI.

CVE(s): CVE-2016-0785, CVE-2016-2162

Affected product(s) and affected version(s):

FlashSystem V9000 including machine type and models (MTMs) for all available code levels. MTMs affected include 9846-AE2, 9848-AE2, 9846-AC2, and 9848-AC2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/29Ygo0f
X-Force Database: http://ift.tt/1saMeNi
X-Force Database: http://ift.tt/1TXkwtO

from IBM Product Security Incident Response Team http://ift.tt/2axAInM