IBM Security Bulletin: Apache Commons Collections affects Cúram Social Program Management (CVE-2015-7450)

Cúram SPM uses the Apache Commons Collections Library. Apache Commons Collections could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of data with Java InvokerTransformer class. By sending specially...

from IBM Product Security Incident Response Team http://ift.tt/1P59y5I