Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM WebSphere Commerce 7.0 Feature Pack 4 and Feature Pack 5 incorrectly maintains a valid session after unspecified interaction with REST services, which allows remote attackers to issue REST requests in the context of an arbitrary user's active session via unknown vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM WebSphere Commerce Enterprise 身份认证绕过漏洞
Vulnerability Description
IBM WebSphere Commerce Enterprise是美国IBM公司的一套电子商务解决方案。该方案主要用于大容量的B2C和B2B业务模型以及多个电子商务站点的高级平台。 该漏洞源于程序在与REST服务进行某种交互后，维护了一段错误的会话，远程攻击者可利用该漏洞在任意用户的活动会话的上下文中运行REST服务。
CVSS Information
N/A
Vulnerability Type
N/A