CVE-2014-6211
20.05.2015, 01:59
The command-line scripts in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 2 through 8, when debugging is configured, do not properly restrict the logging of personal data, which allows local users to obtain sensitive information by reading a log file.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | websphere_commerce | 6.0.0.0 |
| ibm | websphere_commerce | 6.0.0.1 |
| ibm | websphere_commerce | 6.0.0.2 |
| ibm | websphere_commerce | 6.0.0.3 |
| ibm | websphere_commerce | 6.0.0.4 |
| ibm | websphere_commerce | 6.0.0.5 |
| ibm | websphere_commerce | 6.0.0.6 |
| ibm | websphere_commerce | 6.0.0.7 |
| ibm | websphere_commerce | 6.0.0.8 |
| ibm | websphere_commerce | 6.0.0.9 |
| ibm | websphere_commerce | 6.0.0.10 |
| ibm | websphere_commerce | 6.0.0.11 |
| ibm | websphere_commerce | 7.0 |
| ibm | websphere_commerce | 7.0.0.1 |
| ibm | websphere_commerce | 7.0.0.2 |
| ibm | websphere_commerce | 7.0.0.3 |
| ibm | websphere_commerce | 7.0.0.4 |
| ibm | websphere_commerce | 7.0.0.5 |
| ibm | websphere_commerce | 7.0.0.6 |
| ibm | websphere_commerce | 7.0.0.7 |
| ibm | websphere_commerce | 7.0.0.8 |
| ibm | websphere_commerce | 7.0.0.9 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References