Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-75pw-vg89-wmq9

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient access control, which allows remote attackers to discover passwords, and database and filesystem details, via direct requests for configuration files.

The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient access control, which allows remote attackers to discover passwords, and database and filesystem details, via direct requests for configuration files.

EPSS

Процентиль: 43%
0.00207
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
больше 16 лет назад

The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient access control, which allows remote attackers to discover passwords, and database and filesystem details, via direct requests for configuration files.

EPSS

Процентиль: 43%
0.00207
Низкий

Дефекты

CWE-200