IBM Security Bulletin: IBM Case Manager is affected by a vulnerability in Apache Commons FileUpload (CVE-2016-3092)

IBM Case Manager is affected by CVE-2016-3092 through a vulnerable dependency, Apache Commons FileUpload.

CVE(s): CVE-2016-3092

Affected product(s) and affected version(s):

IBM Case Manager 5.1.1.0 – IBM Case Manager 5.1.1.3

IBM Case Manager 5.2.0.0 – IBM Case Manager 5.2.0.4

IBM Case Manager 5.2.1.0 – IBM Case Manager 5.2.1.5

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2dIjR3T
X-Force Database: http://ift.tt/2bozrA8

from IBM Product Security Incident Response Team http://ift.tt/2dIjmXD