CVE-2016-5894

2017-03-0819:00:00

ibm

www.cve.org

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

34.1%

JSON

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. A local user could view a plain text password in a Unix console. IBM Reference #: 1997408.

CNA Affected

[
  {
    "product": "WebSphere Commerce Enterprise",
    "vendor": "IBM Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      }
    ]
  }
]