IBM Security Bulletin: Potential bypass security vulnerability in Expression Language library used by WebSphere Application Server (CVE-2014-7810) affects IBM Security AppScan Enterprise

There is a potential bypass security vulnerability in the expression language library used by WebSphere Application Server (CVE-2014-7810) used with IBM Security AppScan Enterprise.

CVE(s): CVE-2014-7810

Affected product(s) and affected version(s):
IBM AppScan Enterprise 9.0.3.0 – 9.0.3.11

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10879017
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/103155

The post IBM Security Bulletin: Potential bypass security vulnerability in Expression Language library used by WebSphere Application Server (CVE-2014-7810) affects IBM Security AppScan Enterprise appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ibm.co/2uNRkCF