CVE-2012-5764: IBM WebSphere Commerce password information disclosure

IBM WebSphere Commerce (V7.0 Feature Pack 5 with Bazaarvoice) stores two plain text passwords in a configuration file that could be accessible to a local authenticated user. This could allow the attacker to obtain sensitive information and potentially launch further attacks against the affected s...