CVE-2011-3577 IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors.
HighCVSS 10.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere commerce | = 6.0.0.0 | No fix listed |
| ibm websphere commerce | = 6.0.0.1 | No fix listed |
| ibm websphere commerce | = 6.0.0.2 | No fix listed |
| ibm websphere commerce | = 6.0.0.3 | No fix listed |
| ibm websphere commerce | = 6.0.0.4 | No fix listed |
| ibm websphere commerce | = 6.0.0.5 | No fix listed |
| ibm websphere commerce | = 6.0.0.6 | No fix listed |
| ibm websphere commerce | = 6.0.0.7 | No fix listed |
| ibm websphere commerce | = 6.0.0.8 | No fix listed |
| ibm websphere commerce | = 6.0.0.9 | No fix listed |
| ibm websphere commerce | = 6.0.0.10 | No fix listed |
| ibm websphere commerce | = 6.0.0.11 | No fix listed |
| ibm websphere commerce | = 7.0 | No fix listed |
| ibm websphere commerce | = 7.0.0.1 | No fix listed |
| ibm websphere commerce | = 7.0.0.2 | No fix listed |
| ibm websphere commerce | = 7.0.0.3 | No fix listed |
References
- 45999 third-party-advisory vendor-advisory
- JR40420 vendor-advisory
- www.ibm.com
- 75428 vdb-entry
- 49643 vdb-entry
- websphere-commerce-activity-unspecified(69838) vdb-entry