1 results (0.001 seconds)

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers to obtain sensitive information via a crafted REST URL. IBM WebSphere Commerce Enterprise 7.0.0.9 y 8.x en versiones anteriores a Feature Pack 8 permite a atacantes remotos obtener información sensible a través de una URL REST manipulada. • http://www-01.ibm.com/support/docview.wss?uid=swg1JR53970 http://www-01.ibm.com/support/docview.wss?uid=swg24041027 http://www.securitytracker.com/id/1034104 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •