CVE-2016-0225 - IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.9 allows remote authenticated Commerce Accelerator administrators to obtain sensitive information via unspecified vectors

Back Back to CVE browser

MEDIUM

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.9 allows remote authenticated Commerce Accelerator administrators to obtain sensitive information via unspecified vectors

Published Feb 29, 2016

4.9

MEDIUM

CVSS 3.0

EPSS 1.10%

Description

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.9 allows remote authenticated Commerce Accelerator administrators to obtain sensitive information via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-200

Exposure of Sensitive Information

CWE-284

References (3)

http://www-01.ibm.com/support/docview.wss?uid=swg1JR54585
vendor-advisoryx_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg21976623
x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-0260
Advisory

Link	Providers	Tags
http://www-01.ibm.com/support/docview.wss?uid=swg1JR54585		vendor-advisoryx_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg21976623		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-0260		Advisory