Security enhancement: Protect against potential remote code execution.

Download Apache Struts 1.3.10 from the Apache Struts web site using the link below:

https://struts.apache.org/download.cgi

Make a backup of the Apache Struts 1.1 jar file from the location

<TIBCO_HOME>\ps\5.2\lib

and replace it with the Apache Struts 1.3.10 version.

Before replacing the jar file please follow the steps below for any deployed applications on the TIBCO BusinessWorks™ Collaborator desktop.

1. Undeploy the application from the Apache Tomcat® instance.
2. Recreate the shared archive file through domain utility.
3. Redeploy the application.

As an alternative to redeploying the application you can instead replace the Apache Struts jar file in the Apache Tomcat deployed instance.

We recommend that you perform these operations in a development or test environment and execute a complete test before staging to a production environment.

For further details please refer to the TIBCO BusinessWorks Collaborator Administration guide: https://docs.tibco.com/emp/bwc/5.6.3/doc/bwc/pdf/TIB_bwc_5.6_admin_guide.pdf