Description
The Update Installer in IBM WebSphere Commerce Enterprise 7.0.0.8 and 7.0.0.9 does not properly replicate the search index, which allows attackers to obtain sensitive information via unspecified vectors.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg24041614
- JR54563 vendor-advisory