IMPORTANT ANNOUNCEMENT: This website was decommissioned on July 18, 2022

Posted on July 18, 2022

This site is no longer being updated with new postings. Please visit the UBC IT Status Page at https://status.it.ubc.ca for any new status updates and incident notifications. For operational status of our enterprise-level services, users can now subscribe in multiple ways that now includes push notifications:

  • Email
  • SMS
  • Slack integration
  • Twitter
  • Webhooks
  • RSS feed
  • Custom Embed via Status API

You will be redirected shortly to the Status Page or follow the link below to go there now.

Visit the UBC IT Status Page

 

IMPORTANT ANNOUNCEMENT: This website will be decommissioned on July 18, 2022

Posted on June 20, 2022

The UBC IT Bulletins site will no longer be updated on July 18, 2022 and users will need to visit its replacement, the UBC IT Status Page at https://status.it.ubc.ca, where they can view or subscribe to status updates and incident notifications.

UBC IT Bulletins was kept as a legacy site in order to temporarily maintain RSS feeds and intended to provide users time to switch their subscriptions to the Status Page channels.

Before the decommission date of July 18, 2022, we recommend visitors go to https://status.it.ubc.ca to begin subscribing to the new notifications the Status Page has to offer. For our enterprise-level services, users can now subscribe in multiple ways that now include customizable push notifications:

  • SMS messaging
  • Email notifications
  • Webhooks
  • Twitter feed
  • A general RSS feed
  • Custom Slack notifications
  • Custom embed code via an API

Visit the UBC IT Status Page

Apache Struts 2 Framework Vulnerability

By Operations Centre on March 9, 2017

A severe vulnerability has been detected in Apache Struts 2 framework and is being actively exploited in the wild.  Vulnerable platforms can have a remote malicious code executed on the server, potentially disabling server-based firewalls and deploying other types of malwares and code.

 

Severity

Critical

 

CVE Number

CVE-2017-5638

 

Impacted Platforms

  • Apache Struts 2.3.5 through 2.3.31
  • Apache Struts 2.5 through 2.5.10

 

Recommended actions

  • Please patch as soon as possible
  • For self-diagnosis, please complete the script below:

https://threatprotect.qualys.com/2017/03/08/apache-struts-jakarta-multipart-

parser-remote-code-execution-vulnerability/?_ga=1.174695586.1869652878.14890

20308

 

More information

https://cwiki.apache.org/confluence/display/WW/S2-045

https://arstechnica.com/security/2017/03/critical-vulnerability-under-massive-attack-imperils-high-impact-sites/

http://www.securityweek.com/apache-struts-vulnerability-exploited-wild?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Securityweek+%28SecurityWeek+RSS+Feed%29

Posted in ,

Visit the UBC IT Website

Archives

RSS Feeds