PT-2010-1270 · Ibm · Ibm Websphere Commerce

Publicado 2010-02-05 · Atualizado 2017-08-17 · CVE-2009-2751

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Commerce version 7.0

Description The issue is related to the use of the same cryptographic key for session attributes and merchant data encryption. This has an unspecified impact and can be exploited through remote attack vectors.

Recommendations For IBM WebSphere Commerce version 7.0, consider using distinct cryptographic keys for session attributes and merchant data encryption as a mitigation measure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2009-2751

Produtos afetados

Ibm Websphere Commerce

Referências · 4

• http://www-1.ibm.com/support/docview.wss?uid=swg1JR35136 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56089 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21418443 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-2751 · Nota de Segurança