CVE-2016-5894

MEDIUM

IBM WebSphere Commerce <8.0 - Info Disclosure

Title source: llm

Description

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. A local user could view a plain text password in a Unix console. IBM Reference #: 1997408.

References (3)

[Patch, Vendor Advisory] http://www.ibm.com/support/docview.wss?uid=swg21997408

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1037962

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/96624

Scores

CVSS v3 5.1

EPSS 0.0005

EPSS Percentile 16.8%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-200

Status published

Affected Products (44)

ibm/websphere_commerce

... and 29 more

Timeline

Published Mar 08, 2017

Tracked Since Feb 18, 2026