Description
IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.
References
- JR35199 vendor-advisory
- websphere-commerce-scheme-weak-security(56090) vdb-entry
- JR35136 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21418445