Skip to content
OpenAdvisories
Medium WID-SEC-2024-3571 3 CVEs

HCL Commerce: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Dec 1, 2024 · Updated Dec 1, 2024 · de-DE

Vendor: HCL Software Product: Commerce

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in HCL Commerce ausnutzen, um Informationen offenzulegen.

Product

Commerce ist eine e-Commerce Anwendung von HCL.

Vulnerabilities 3

  • Medium 6.8
    CVE-2022-33165

    IBM Security Directory Server information disclosure

    IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 228582.

    IBM Security Directory Server
  • Medium 5.3
    CVE-2022-32751

    IBM Security Verify Directory information disclosure

    IBM Security Verify Directory 10.0.0 could disclose sensitive server information that could be used in further attacks against the system. IBM X-Force ID: 228437.

    IBM Security Verify Directory
  • Medium 4.5
    CVE-2022-32753

    IBM Security Verify Directory information disclosure

    IBM Security Verify Directory 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 228444.

    IBM Security Verify Directory

Revision history

  1. #1

    Initiale Fassung

References