medium5.0
CVE-2001-0389
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTML…
Impact
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Net.Commerce | Version 3.1.2 |
| Ibm | Websphere Application Server | Version 5.1.0.3 |