IBM Security Bulletin: Vulnerability in Open Source Apache Commons FileUpload Affects IBM Emptoris Contract Management, IBM Emptoris Spend and IBM Emptoris Sourcing (CVE-2016-1000031)

A vulnerability in Open Source Apache Commons FileUpload affects IBM Emptoris Contract Management, IBM Emptoris Spend and IBM Emptoris Sourcing

CVE(s): CVE-2016-1000031

Affected product(s) and affected version(s):

IBM Emptoris Contract Management 10.0.0 through 10.1.3.8
IBM Emptoris Spend 10.0.0 through 10.1.3.7
IBM Emptoris Sourcing 10.0.0 through 10.1.3.7

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22013354
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/117957

The post IBM Security Bulletin: Vulnerability in Open Source Apache Commons FileUpload Affects IBM Emptoris Contract Management, IBM Emptoris Spend and IBM Emptoris Sourcing (CVE-2016-1000031) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2p9DnMO