Security Bulletin: Some IBM Sterling Order Management APIs may return database sensitive information (CVE-2013-0578)

Abstract Some IBM Sterling Order Management APIs may return database sensitive information when API tester is deployed in the environment. Content VULNERABILITY DETAILS: DESCRIPTION: Some IBM Sterling Order Management APIs can return database sensitive user information when used in API tester. Al...

CVE-2013-0578

This CVE (CVE-2013-0578) affects IBM Sterling Order Management APIs across Sterling Multi-Channel Fulfillment Solution 8.0 (HF128), Sterling Selling and Fulfillment Foundation 8.5 (HF93), 9.0 (HF73), 9.1.0 (FP45), and 9.2.0 (FP17). Root cause: when the API tester is enabled, administrative creden...