Skip to content
OpenAdvisories
Low · 3.1 CVE-2018-1644 EUVD-2018-12223GHSA-95rc-cm6x-rc44

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 9.0.0.0 - 9.0.0.4, 8.0.0.0 - 8.0.0.19, 8.0.1.0 - 8.0.1.13, 8.0.3.0 …

Published Aug 27, 2018 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: WebSphere Commerce

Description

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 9.0.0.0 - 9.0.0.4, 8.0.0.0 - 8.0.0.19, 8.0.1.0 - 8.0.1.13, 8.0.3.0 - 8.0.3.6, 8.0.4.0 - 8.0.4.14, and 7.0.0.0 Feature Pack 8 could allow an authenticated user to obtain sensitive information about another user.

Affected products

VendorProductAffectedFixed
IBM WebSphere Commerce 7.0.0.0, 8.0.4.0, 8.0.4.14, 8.0.3.0, 8.0.3.6, 8.0.1.0, 8.0.1.13, 8.0.0.0, 8.0.0.19, 9.0.0.0, 9.0.0.4, 8.0.4.3, 8.0.4.4, 8.0.4.5, 8.0.4.6, 8.0.4.7, 8.0.4.8, 8.0.4.9, 8.0.4.10, 8.0.4.11, 8.0.4.12, 8.0.4.13, 8.0.3.1, 8.0.3.2, 8.0.3.3, 8.0.3.4, 8.0.3.5, 8.0.4.1, 8.0.4.2, 8.0.1.1, 8.0.1.2, 8.0.1.3, 8.0.… —

References