cbcvebase.
CVE-2001-0389
published 2001-07-02

CVE-2001-0389: IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a…

medium5CVSS 3.1
AVNACLAuNCPINAN
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument.

Affected

2 ranges
VendorProductVersion rangeFixed in
ibmnet.commerce
ibmwebsphere_application_server