IBM Security Bulletin: IBM WebSphere Commerce could allow an authenticated attacker to obtain information such as user personal data. (CVE-2017-1484)

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer could allow an authenticated attacker to obtain information such as user personal data.

CVE(s): CVE-2017-1484

Affected product(s) and affected version(s):

WebSphere Commerce versions 8.0.0.0 – 8.0.0.19
WebSphere Commerce versions 8.0.1.0 – 8.0.1.13
WebSphere Commerce versions 8.0.3.0 – 8.0.3.4
WebSphere Commerce versions 8.0.4.0 – 8.0.4.8
WebSphere Commerce versions 7.0.0.0 Feature Pack 1 through 8

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2jza724
X-Force Database: http://ift.tt/2hENhWo

The post IBM Security Bulletin: IBM WebSphere Commerce could allow an authenticated attacker to obtain information such as user personal data. (CVE-2017-1484) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2jyBdGX