Security Bulletin: Vulnerability in Apache Commons Codec Affects IBM Sterling Secure Proxy

Summary An Apache Commons Codec vulnerability for validating input was addressed by IBM Sterling Secure Proxy. Vulnerability Details Third Party Entry: 177835 DESCRIPTION: Apache Commons Codec information disclosure CVSS Base score: 7.5 CVSS Temporal Score: See:...

Security Bulletin: Vulnerability in Apache Commons Codec affects IBM Cúram Social Program Management (177835)

Summary IBM Cúram Social Program Management uses Apache Commons Codec libraries, for which there is a publicly known vulnerability. Apache Commons Codec could allow a remote attacker to obtain sensitive information, caused by the improper validation of input. An attacker could exploit this...

Security Bulletin: Vulnerability in Apache Commons Codec affects IBM Operations Analytics Predictive Insights

Summary Apache Commons Codec is used by IBM Operations Analytics Predictive Insights. Apache Commons Codec vulnerability 177835 could allow a remote attacker to obtain sensitive information, caused by the improper validation of input. This vulnerability affects IBM Operations Analytics Predictive...

Security Bulletin: Vulnerability in Apache Commons Codec affects Netcool/OMNIbus CEM Gateway and ServiceNow Gateway

Summary Netcool/OMNIbus CEM Gateway and ServiceNow Gateway are vulnerable to remote attack to obtain sensitive info by exploiting the weakness in Apache Commons Codec. CVE-177835 Vulnerability Details Third Party Entry: 177835 DESCRIPTION: Apache Commons Codec information disclosure CVSS Base...

Security Bulletin: IBM Tivoli Netcool Impact is affected by an Apache Commons Codec vulnerability

Summary IBM Tivoli Netcool Impact has addressed the following Apache Commons Codec vulnerability. Vulnerability Details Third Party Entry: 177835 DESCRIPTION: Apache Commons Codec information disclosure CVSS Base score: 7.5 CVSS Temporal Score: See:...

The vulnerability of the commons-jelly component in the Jackson-databind library of the FasterXML project allows a hacker to execute arbitrary code.

The vulnerability of the commons-jelly component in the Jackson-databind library of the FasterXML project is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code on the target system...

Security Bulletin: Atlas eDiscovery Process Management(6.0.1.x and 6.0.2.x versions) is affected by a vulnerable Apache Commons Beanutils in WebSphere Application Server

Abstract This Fix Readme includes instructions to upgrading the Apache Commons Beanutils jar to v1.9.4 for Atlas eDiscovery Process Management6.0.1.x and 6.0.2.x versions Content PSIRT details: PRID: PVR0203016, Advisory ADV0020809 - Apache Commons Beanutils Vulnerability CVEID: CVE-2019-10086 CV...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Security Key Lifecycle Manager (SKLM) (CVE-2014-0114, CVE-2019-10086)

Summary WebSphere Application Server is shipped as a component of IBM Security Key Lifecycle Manager SKLM. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in t...

Security Bulletin: Apache Commons Codec Vulnerability Affects IBM Control Center

Summary Apache Commons Codec could allow a remote attacker to obtain sensitive information, caused by the improper validation of input. Vulnerability Details Third Party Entry: 177835 DESCRIPTION: Apache Commons Codec information disclosure CVSS Base score: 7.5 CVSS Temporal Score: See:...

jackson-databind: Serialization gadgets in commons-jelly:commons-jelly

A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Moderate Photon OS Security Update - PHSA-2020-0141

Updates of 'commons-httpclient', 'openssl' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2020-3.0-0141

Updates of 'openssl', 'commons-httpclient' packages of Photon OS have been released...

Security Bulletin: Multiple security vulnerabilities have been fixed in IBM Security Identity Manager Virtual Appliance

Summary IBM Security Identity Manager Virtual Appliance ISIM VA has addressed the following vulnerabilities Vulnerability Details CVEID: CVE-2014-0050 DESCRIPTION: Apache Commons FileUpload, as used in Apache Tomcat, Solr, and other products is vulnerable to a denial of service, caused by the...

Security Bulletin: IBM Tivoli Common Reporting: TCR, a part of IBM Jazz for Service Management (JazzSM) is vulnerable to Apache Commons Beanutils (CVE-2019-10086)

Summary There is a vulnerability in Apache Commons Beanutils that is used by WebSphere Application Server. This has been addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- Tivo...

Security Bulletin: Vulnerability in Apache Commons affects Rational Software Architect, Rational Software Architect for WebSphere Software and Rational Software Architect RealTime (CVE-2015-7450)

Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by Rational Software Architect, Rational Software Architect for WebSphere Software and Rational Software Architect RealTime. Vulnerability Details CVEID: CVE-2015-7450 DESCRIPTION: Apache...

favana-docx (>=1.0.28 <=1.0.47), web-commons-export (=1.2.10) potentially affected by unknown CVE via office-converter (=1.0.2)

office-converter NPM version =1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on office-converter and may be impacted: - favana-docx =1.0.28, =1.0.47 - web-commons-export =1.2.10 Source cves: unknown CVE Source advisory: OSV:GHSA-9P64-H5Q4-PHPM...

Security Bulletin: Vulnerability in Apache Commons Codec affects IBM WebSphere Service Registry and Repository

Summary A potential information disclosure vulnerability in Apache Commons Codec affects IBM WebSphere Service Registry and Repository. Vulnerability Details Third Party Entry: 177835 DESCRIPTION: Apache Commons Codec information disclosure CVSS Base score: 7.5 CVSS Temporal Score: See:...

Security Bulletin: Vulnerability in Apache Commons Codec affects IBM Spectrum Scale Transparent Cloud Tiering (177835)

Summary Apache Commons Codec could allow a remote attacker to obtain sensitive information, caused by the improper validation of input. This vulnerability affects IBM Spectrum Scale Transparent Cloud Tiering. Vulnerability Details Third Party Entry: 177835 DESCRIPTION: Apache Commons Codec...

apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default

A flaw was found in the Apache Commons BeanUtils, where the class property in PropertyUtilsBean is not suppressed by default. This flaw allows an attacker to access the classloader...

ysoserial

This is a Java tool called ysoserial, which is a proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. The tool is designed to create payloads that can be used to execute arbitrary code on a Java application that performs unsafe deserialization of objects...