IBM Security Bulletin: Apache Commons FileUpload Vulnerabilities in IBM WebSphere MQ File Transfer Edition component (CVE-2016-1000031)

The DiskFileItem class in Apache Commons Fileupload before version 1.3.3, used in IBM WebSphere MQ File Transfer Edition, could allow remote attackers to execute arbitrary code under the context of the current process, causing an undefined behavior.

CVE(s): CVE-2016-1000031

Affected product(s) and affected version(s):

IBM WebSphere MQ v7.0.0

IBM WebSphere MQ v7.0.1

IBM WebSphere MQ v7.0.2

IBM WebSphere MQ v7.0.3

IBM WebSphere MQ v7.0.4

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2pNmcDV
X-Force Database: http://ift.tt/2hLFPWm

The post IBM Security Bulletin: Apache Commons FileUpload Vulnerabilities in IBM WebSphere MQ File Transfer Edition component (CVE-2016-1000031) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2E1NlG0