CVE ID:	CVE-2013-1768
Description:	The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects, which makes it easier for remote attackers to execute arbitrary code by creating a serialized object and leveraging improperly secured server programs.
Test IDs:	1.3.6.1.4.1.25623.1.1.10.2013.0292   1.3.6.1.4.1.25623.1.0.866758   1.3.6.1.4.1.25623.1.0.866287   1.3.6.1.4.1.25623.1.0.866113
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1768 AIX APAR: PM86780 http://www-01.ibm.com/support/docview.wss?uid=swg1PM86780 AIX APAR: PM86786 http://www-01.ibm.com/support/docview.wss?uid=swg1PM86786 AIX APAR: PM86788 http://www-01.ibm.com/support/docview.wss?uid=swg1PM86788 AIX APAR: PM86791 http://www-01.ibm.com/support/docview.wss?uid=swg1PM86791 BugTraq ID: 60534 http://www.securityfocus.com/bid/60534 http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0099.html http://www-01.ibm.com/support/docview.wss?uid=swg21635999 RedHat Security Advisories: RHSA-2013:1862 http://rhn.redhat.com/errata/RHSA-2013-1862.html XForce ISS Database: openjpa-cve20131768-command-execution(82268) https://exchange.xforce.ibmcloud.com/vulnerabilities/82268