PT-2017-13716 · Ibm · Ibm Websphere Commerce

Published 2017-11-27 · Updated 2017-12-15 · CVE-2017-1484

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Commerce versions 7.0 through 8.0

Description The issue allows an authenticated attacker to obtain sensitive information, including user personal data.

Recommendations For versions 7.0 through 8.0, update to a version that includes the fix for this issue to prevent unauthorized access to user personal data.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-1484

Affected Products

Ibm Websphere Commerce

References · 5

• http://ibm.com/support/docview.wss?uid=swg22010103 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1484 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128622 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-1484 · Vendor Advisory
• http://securityfocus.com/bid/101894 · Note