IBM Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple Struts vulnerabilities (CVE-2016-1181, CVE-2016-1182)

Multiple vulnerabilities have been identified in Struts that is embedded in the IBM FSM. This bulletin addresses these vulnerabilities.

CVE(s): CVE-2016-1181, CVE-2016-1182

Affected product(s) and affected version(s):

Flex System Manager 1.3.4.0
Flex System Manager 1.3.3.0
Flex System Manager 1.3.2.1
Flex System Manager 1.3.2.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2nElPtL
X-Force Database: http://ift.tt/2974C3a
X-Force Database: http://ift.tt/29tkNpV

The post IBM Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple Struts vulnerabilities (CVE-2016-1181, CVE-2016-1182) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2ptuHP7