CVE-2013-0523

Vulnerability CVE-2013-0523 affects IBM WebSphere Commerce Enterprise 5.6.x (5.6.1.0–5.6.1.5), 6.0.x (6.0.0.0–6.0.0.11), and 7.0.x (7.0.0.0–7.0.0.7). The issue is that the storefront uses a krypto URL parameter encrypted with a block cipher without proper integrity protection, enabling a padding ...