IBM Security Bulletin: An IBM BigFix Platform Vulnerability Could Allow OS Command Injection Vulnerability (CVE-2016-0291 )

BigFix WeReports server may allow OS Command Injection

CVE(s): CVE-2016-0291

Affected product(s) and affected version(s):

9.0, 9.1, 9.2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2bhPnGH
X-Force Database: http://ift.tt/2b90Q9V

from IBM Product Security Incident Response Team http://ift.tt/2bhRFFq