medium6.4
CVE-2013-2994
IBM WebSphere Commerce 7.0 Feature Pack 4 and Feature Pack 5 incorrectly maintains a valid session after unspecified interaction with REST services, which allo…
Impact
IBM WebSphere Commerce 7.0 Feature Pack 4 and Feature Pack 5 incorrectly maintains a valid session after unspecified interaction with REST services, which allows remote attackers to issue REST requests in the context of an arbitrary user's active session via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Commerce | Version 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR45420
- http://www-01.ibm.com/support/docview.wss?uid=swg21644393
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84033
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR45420
- http://www-01.ibm.com/support/docview.wss?uid=swg21644393
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84033