CVE-2011-3577

2011-09-2010:00:00

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.2%

JSON

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors.

References

secunia.com/advisories/45999

www.ibm.com/support/docview.wss?uid=swg1JR40420

www.ibm.com/support/docview.wss?uid=swg24030908

www.osvdb.org/75428

www.securityfocus.com/bid/49643

exchange.xforce.ibmcloud.com/vulnerabilities/69838