Lucene search
HistorySep 20, 2011 - 10:55 a.m.
CVE-2011-3577
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.7
Confidence
Low
EPSS
0.004
Percentile
72.2%
IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors.
Affected configurations
Node
ibmwebsphere_commerceMatch6.0.0.0
ORibmwebsphere_commerceMatch6.0.0.1
ORibmwebsphere_commerceMatch6.0.0.2
ORibmwebsphere_commerceMatch6.0.0.3
ORibmwebsphere_commerceMatch6.0.0.4
ORibmwebsphere_commerceMatch6.0.0.5
ORibmwebsphere_commerceMatch6.0.0.6
ORibmwebsphere_commerceMatch6.0.0.7
ORibmwebsphere_commerceMatch6.0.0.8
ORibmwebsphere_commerceMatch6.0.0.9
ORibmwebsphere_commerceMatch6.0.0.10
ORibmwebsphere_commerceMatch6.0.0.11
Node
ibmwebsphere_commerceMatch7.0
ORibmwebsphere_commerceMatch7.0.0.1
ORibmwebsphere_commerceMatch7.0.0.2
ORibmwebsphere_commerceMatch7.0.0.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | websphere_commerce | 6.0.0.0 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.0:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.1 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.1:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.2 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.2:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.3 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.3:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.4 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.4:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.5 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.5:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.6 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.6:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.7 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.7:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.8 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.8:*:*:*:*:*:*:* |
| ibm | websphere_commerce | 6.0.0.9 | cpe:2.3:a:ibm:websphere_commerce:6.0.0.9:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2011-3577
2011-09-20 10:55:08
cvelist
cvelist
CVE-2011-3577
2011-09-20 10:00:00
prion
prion
Authentication flaw
2011-09-20 10:55:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.7
Confidence
Low
EPSS
0.004
Percentile
72.2%
Related for NVD:CVE-2011-3577