Vulnerability Description
The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient access control, which allows remote attackers to discover passwords, and database and filesystem details, via direct requests for configuration files.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Websphere Commerce Suite | All versions |
Related Weaknesses (CWE)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52616
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52616
FAQ
What is CVE-2009-2956?
CVE-2009-2956 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient access control, which allows remote attackers to disco...
How severe is CVE-2009-2956?
CVE-2009-2956 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-2956?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Websphere Commerce Suite.