In a recent VMware update, several security fixes for vulnerabilities affecting Apache Struts Java application framework have been implemented in vCenter Operations Management Suite (vCOps). One of the flaws, identified as CVE-2014-0112, would allow remote code execution from a potential attacker; it appears that the problem had been previously addressed with CVE-2014-0094, but the issue had been only partially solved. This security fix comes about one month after Apache Struts received the …
