CVE-2009-2956

The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient access…

published August 24, 2009

CVSS
—
EPSS
1%
Percentile
64.7
In the wild
Unconfirmed
What it is

The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient access control, which allows remote attackers to discover passwords, and database and filesystem details, via direct requests for configuration files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01076 · 64.7th percentile
Published
2009-08-24T15:00Z
EPSS history
Timeline
  • 24 AUG 15:00Z
    The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient access…
    cvelistv5