CVE-2016-5894

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. A local user could view a plain text password in a Unix console. IBM Reference #: 1997408.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.1 MEDIUM
LOCAL
HIGH
NONE
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 17%
VendorProductVersion
ibmwebsphere_commerce
7.0
ibmwebsphere_commerce
7.0.0.1
ibmwebsphere_commerce
7.0.0.2
ibmwebsphere_commerce
7.0.0.3
ibmwebsphere_commerce
7.0.0.4
ibmwebsphere_commerce
7.0.0.5
ibmwebsphere_commerce
7.0.0.6
ibmwebsphere_commerce
7.0.0.7
ibmwebsphere_commerce
7.0.0.8
ibmwebsphere_commerce
7.0.0.9
ibmwebsphere_commerce
8.0.0.0
ibmwebsphere_commerce
8.0.0.1
ibmwebsphere_commerce
8.0.0.2
ibmwebsphere_commerce
8.0.0.3
ibmwebsphere_commerce
8.0.0.4
ibmwebsphere_commerce
8.0.0.5
ibmwebsphere_commerce
8.0.0.6
ibmwebsphere_commerce
8.0.0.7
ibmwebsphere_commerce
8.0.0.8
ibmwebsphere_commerce
8.0.0.9
ibmwebsphere_commerce
8.0.0.10
ibmwebsphere_commerce
8.0.0.11
ibmwebsphere_commerce
8.0.0.12
ibmwebsphere_commerce
8.0.0.13
ibmwebsphere_commerce
8.0.0.14
ibmwebsphere_commerce
8.0.0.15
ibmwebsphere_commerce
8.0.0.16
ibmwebsphere_commerce
8.0.0.17
ibmwebsphere_commerce
8.0.0.18
ibmwebsphere_commerce
8.0.0.19
ibmwebsphere_commerce
8.0.1.0
ibmwebsphere_commerce
8.0.1.1
ibmwebsphere_commerce
8.0.1.2
ibmwebsphere_commerce
8.0.1.3
ibmwebsphere_commerce
8.0.1.4
ibmwebsphere_commerce
8.0.1.5
ibmwebsphere_commerce
8.0.1.6
ibmwebsphere_commerce
8.0.1.7
ibmwebsphere_commerce
8.0.1.8
ibmwebsphere_commerce
8.0.1.9
ibmwebsphere_commerce
8.0.1.11
ibmwebsphere_commerce
8.0.1.12
𝑥
= Vulnerable software versions