CVE-2015-5015

IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers to obtain sensitive information via a crafted REST URL.

Score

CVSS 2.0 5.0 Medium

Status

Modified - psirt@us.ibm.com

Published

2015-11-08

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Websphere Commerce Enterprise (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1JR53970
• http://www-01.ibm.com/support/docview.wss?uid=swg24041027
• http://www.securitytracker.com/id/1034104