IBM Security Bulletin: IBM Web Experience Factory is affected by an Apache Commons FileUpload vulnerability

IBM Web Experience Factory has addressed the following vulnerability. The Apache Commons FileUpload library could allow a remote attacker to execute arbitrary code on the system

CVE(s): CVE-2016-1000031

Affected product(s) and affected version(s):

IBM Web Experience Factory 8.0.0.0 – 8.0.0.3

IBM Web Experience Factory 8.5.0.0 – 8.5.0.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2AcRzb5
X-Force Database: http://ift.tt/2hLFPWm

The post IBM Security Bulletin: IBM Web Experience Factory is affected by an Apache Commons FileUpload vulnerability appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2AdiuUl