IBM Security Bulletin: Apache Commons FileUpload Vulnerability affects WebSphere Application Server (CVE-2016-3092)

Apache Commons Fileupload vulnerability affects WebSphere Application Server and WebSphere Application Server Hypervisor Edition.

CVE(s): CVE-2016-3092

Affected product(s) and affected version(s):

The following Versions of WebSphere Application Server and IBM WebSphere Application Server Hypervisor Edition may be affected:

• Liberty
• Version 9.0
• Version 8.5
• Version 8.0
• Version 7.0

This vulnerability also affects the following versions of WebSphere Extended Deployment Compute Grid:

• Version 8.0 on WebSphere Application Server Version 7 or Version 8

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2bWZvFt
X-Force Database: http://ift.tt/2bozrA8

from IBM Product Security Incident Response Team http://ift.tt/2bWZph7