IBM Security Bulletin: Apache Commons FileUpload Vulnerabilities in IBM WebSphere MQ Managed File Transfer component (CVE-2016-1000031)

The DiskFileItem class in Apache Commons Fileupload before 1.3.3, as used in IBM WebSphere MQ Managed File Transfer, specifically the Web Gateway component, allows remote attackers to execute arbitrary code under current context of the current process causing an undefined behavior.

CVE(s): CVE-2016-1000031

Affected product(s) and affected version(s):

IBM WebSphere MQ v7.5.0.0 to v7.5.0.8

IBM WebSphere MQ v8.0.0.0 to v8.0.0.8

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22011788
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/117957

The post IBM Security Bulletin: Apache Commons FileUpload Vulnerabilities in IBM WebSphere MQ Managed File Transfer component (CVE-2016-1000031) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2raTqKG