Description
IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which has unspecified impact and remote attack vectors.
References
- websphere-commerce-key-weak-security(56089) vdb-entry
- JR35136 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21418443