IBM Security Bulletin: Vulnerability in Apache Struts affects FileNet Content Manager and IBM Content Foundation (CVE-2016-1181, CVE-2016-1182)

Security vulnerabilitiy exists in IBM FileNet Content Manager and IBM Content Foundation in Apache Struts.

CVE(s): CVE-2016-1181, CVE-2016-1182

Affected product(s) and affected version(s):

FileNet Content Manager 5.2.0
IBM Content Foundation 5.2.0

Note: this vulnerability is not applicable to FileNet Content Manager 5.2.1 or IBM Content Foundation 5.2.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2cX7wYQ
X-Force Database: http://ift.tt/2974C3a
X-Force Database: http://ift.tt/29tkNpV

from IBM Product Security Incident Response Team http://ift.tt/2dpcgcA