IBM Security Bulletin: IBM WebSphere Commerce is vulnerable to an open redirect issue (CVE-2017-1398)

IBM WebSphere Commerce is vulnerable to an open redirect issue.

CVE(s): CVE-2017-1398

Affected product(s) and affected version(s):

WebSphere Commerce versions 8.0.0.0 and higher
WebSphere Commerce versions 7.0.0.0 and higher
WebSphere Commerce versions 6.0.0.0 and higher

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2sxEVQo
X-Force Database: http://ift.tt/2tPN0UG

The post IBM Security Bulletin: IBM WebSphere Commerce is vulnerable to an open redirect issue (CVE-2017-1398) appeared first on IBM PSIRT Blog.



from IBM Product Security Incident Response Team http://ift.tt/2sxfz5h