Vulnerability Details CVE-2009-2751
IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which has unspecified impact and remote attack vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 41.5%
CVSS Severity
CVSS v2 Score 4.3
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21418443
- http://www-1.ibm.com/support/docview.wss?uid=swg1JR35136
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56089
- http://www-01.ibm.com/support/docview.wss?uid=swg21418443
- http://www-1.ibm.com/support/docview.wss?uid=swg1JR35136
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56089
Products affected by CVE-2009-2751
-
cpe:2.3:a:ibm:websphere_commerce:7.0