CVE-2010-2639 - IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."

Back Back to CVE browser

MEDIUM

IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."

Published Dec 6, 2010

5.0

MEDIUM

CVSS 2.0

EPSS 1.22%

Description

IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (5)

http://www-01.ibm.com/support/docview.wss?uid=swg24028397
x_refsource_CONFIRMVendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1JR38114
vendor-advisoryx_refsource_AIXAPARVendor Advisory
http://www.securitytracker.com/id?1024845
vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-2643
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/63406
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www-01.ibm.com/support/docview.wss?uid=swg24028397		x_refsource_CONFIRMVendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1JR38114		vendor-advisoryx_refsource_AIXAPARVendor Advisory
http://www.securitytracker.com/id?1024845		vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-2643		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/63406		vdb-entryx_refsource_XF