• info
• discussion
• exploit
• solution
• references

IBM WebSphere Commerce Default User Information Disclosure Vulnerability

It is reported that WebSphere Commerce is susceptible to an information disclosure vulnerability.

This vulnerability may result in potentially sensitive customer data being available to the default user, possibly allowing unintended users to gain access to it.

This vulnerability is reported to affect versions 5.1, 5.4, 5.5, and 5.6.