Apache ERP Zero-Day Underscores Dangers of Incomplete Patches

Apache fixed a vulnerability in its OfBiz enterprise resource planning (ERP) framework last month, but attackers and researchers found a way around the patch.