DataStage 8.5 - Security Bulletin: Vulnerability in Apache Commons affects IBM WebSphere Application Server (CVE-2015-7450)
(Doc ID 2133162.1)
Last updated on JUNE 26, 2018
Applies to:PeopleSoft Enterprise EPM Performance Management Warehouse - Version 9.1 and later
Information in this document applies to any platform.
On: PeopleSoft Enterprise EPM Performance Management Warehouse 9.1; DataStage 8.5 FP1; Installation/Configuration
DataStage 8.5 AIX lpar showing security issue
87171 IBM WebSphere Java Object Deserialization RCE Critical Web Servers
Description: The remote IBM WebSphere Application Server is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections (ACC) library. An unauthenticated, remote attacker can exploit this, by sending a crafted SOAP request, to execute arbitrary code on the target host.
The issue has the following business impact:
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!