IBM Security Bulletin: IBM WebSphere Commerce could allow a remote attacker to obtain sensitive information (CVE-2018-1811)

Oct 23, 2018 9:00 am EDT

Categorized: Medium Severity

Share this post:

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer could allow a remote attacker to obtain sensitive information.

CVE(s): CVE-2018-1811

Affected product(s) and affected version(s):

WebSphere Commerce versions 9.0.0.0 – 9.0.0.6
WebSphere Commerce versions 8.0.0.0 – 8.0.4.16
WebSphere Commerce version 7.0.0.9

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10735589
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/149882



from IBM Product Security Incident Response Team https://ift.tt/2SctElO