IBM Security Bulletin: Vulnerabilities in Apache Struts affect the IBM FlashSystem model V840 (CVE-2016-0785 CVE-2016-2162)

Open Source Apache Struts vulnerabilities were disclosed in March 2016. Struts is used by the IBM® FlashSystem™ V840 in its Service Assistant GUI.

CVE(s): CVE-2016-0785, CVE-2016-2162

Affected product(s) and affected version(s):

FlashSystem V840 including machine type and models (MTMs) for all available code levels. MTMs affected include 9846-AE1, 9848-AE1, 9846-AC0, 9848-AC0, 9846-AC1, and 9848-AC1.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2axAWLQ
X-Force Database: http://ift.tt/1saMeNi
X-Force Database: http://ift.tt/1TXkwtO

from IBM Product Security Incident Response Team http://ift.tt/29YgULQ