PT-2010-1271 · Ibm · Ibm Websphere Commerce

Publicado 2010-02-05 · Atualizado 2017-08-17 · CVE-2009-2752

Positive Technologies (AI Summary)

CVSS v2.0

1.5

Baixa

Vetor base

AV:L/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Commerce version 7.0

Description The issue concerns the improper encryption of data in a database, making it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.

Recommendations For IBM WebSphere Commerce version 7.0, ensure that proper encryption mechanisms are implemented to protect data in the database. Consider reconfiguring the database settings to enforce robust encryption.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2009-2752

Produtos afetados

Ibm Websphere Commerce

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2009-2752 · Nota de Segurança
• http://www-1.ibm.com/support/docview.wss?uid=swg1JR35199 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21418445 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg1JR35136 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56090 · Nota