CVE-2016-5894

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. A local user could view a plain text password in a Unix console. IBM Reference #: 1997408.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:websphere_commerce:7.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:7.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:7.0.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:7.0.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:7.0.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:7.0.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:7.0.0.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:7.0.0.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:7.0.0.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:7.0.0.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.11:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.12:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.13:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.14:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.15:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.16:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.17:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.18:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.19:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.11:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.12:*:*:*:*:*:*:*

History

21 Nov 2024, 02:55

Type Values Removed Values Added
References () http://www.ibm.com/support/docview.wss?uid=swg21997408 - Patch, Vendor Advisory () http://www.ibm.com/support/docview.wss?uid=swg21997408 - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/96624 - () http://www.securityfocus.com/bid/96624 -
References () http://www.securitytracker.com/id/1037962 - () http://www.securitytracker.com/id/1037962 -

Information

Published : 2017-03-08 19:59

Updated : 2024-11-21 02:55


NVD link : CVE-2016-5894

Mitre link : CVE-2016-5894

CVE.ORG link : CVE-2016-5894


JSON object : View

Products Affected

ibm

  • websphere_commerce
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor