critical10.0
CVE-2011-3577
IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspe…
Impact
IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Commerce | Versions 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.0.0.4, 6.0.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/45999
- http://www.ibm.com/support/docview.wss?uid=swg1JR40420
- http://www.ibm.com/support/docview.wss?uid=swg24030908
- http://www.osvdb.org/75428
- http://www.securityfocus.com/bid/49643
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69838
- http://secunia.com/advisories/45999
- http://www.ibm.com/support/docview.wss?uid=swg1JR40420
- http://www.ibm.com/support/docview.wss?uid=swg24030908
- http://www.osvdb.org/75428
- http://www.securityfocus.com/bid/49643
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69838