Lucene search
HistorySep 20, 2011 - 10:55 a.m.
CVE-2011-3577
ibm
websphere commerce
6.x
7.x
7.0.0.3
activity token
authentication
vulnerability
nvd
cve-2011-3577
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.2%
IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors.
Affected configurations
Node
ibmwebsphere_commerceMatch6.0.0.0
ORibmwebsphere_commerceMatch6.0.0.1
ORibmwebsphere_commerceMatch6.0.0.2
ORibmwebsphere_commerceMatch6.0.0.3
ORibmwebsphere_commerceMatch6.0.0.4
ORibmwebsphere_commerceMatch6.0.0.5
ORibmwebsphere_commerceMatch6.0.0.6
ORibmwebsphere_commerceMatch6.0.0.7
ORibmwebsphere_commerceMatch6.0.0.8
ORibmwebsphere_commerceMatch6.0.0.9
ORibmwebsphere_commerceMatch6.0.0.10
ORibmwebsphere_commerceMatch6.0.0.11
Node
ibmwebsphere_commerceMatch7.0
ORibmwebsphere_commerceMatch7.0.0.1
ORibmwebsphere_commerceMatch7.0.0.2
ORibmwebsphere_commerceMatch7.0.0.3
Related
cvelist
cvelist
CVE-2011-3577
2011-09-20 10:00:00
prion
prion
Authentication flaw
2011-09-20 10:55:00
nvd
nvd
CVE-2011-3577
2011-09-20 10:55:08
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.2%
Related for CVE-2011-3577