CVEvulnerability

CVE-2011-3577

10.0 HIGH Published 2011-09-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-09-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors.

Affected configurations

• ibm websphere commerce 6.0.0.0 • ibm websphere commerce 6.0.0.1 • ibm websphere commerce 6.0.0.2 • ibm websphere commerce 6.0.0.3 • ibm websphere commerce 6.0.0.4 • ibm websphere commerce 6.0.0.5 • ibm websphere commerce 6.0.0.6 • ibm websphere commerce 6.0.0.7 • ibm websphere commerce 6.0.0.8 • ibm websphere commerce 6.0.0.9 • ibm websphere commerce 6.0.0.10 • ibm websphere commerce 6.0.0.11 • ibm websphere commerce 7.0 • ibm websphere commerce 7.0.0.1 • ibm websphere commerce 7.0.0.2 • ibm websphere commerce 7.0.0.3

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References