Description
IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors.
References
- 45999 third-party-advisory
- http://www.ibm.com/support/docview.wss?uid=swg24030908
- JR40420 vendor-advisory
- 75428 vdb-entry
- 49643 vdb-entry
- websphere-commerce-activity-unspecified(69838) vdb-entry