Description
IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers to obtain sensitive information via a crafted REST URL.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg24041027
- JR53970 vendor-advisory
- 1034104 vdb-entry