CVE-2010-2639 — Sensitive Information Exposure in IBM Websphere Commerce

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
0.4%
top 38.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Websphere Commerce
Timeline
PublishedDec 6
Latest updateMay 17

Description

IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/websphere_commerce7.0, 7.0.0.1+1

🔴Vulnerability Details

2
GHSA
GHSA-vpjv-r4xm-v9c6: IBM WebSphere Commerce Enterprise 7↗2022-05-17
▶
CVEList
CVE-2010-2639: IBM WebSphere Commerce Enterprise 7↗2010-12-06
▶

💥Exploits & PoCs

1
Exploit-DB
CitectSCADA/CitectFacilities ODBC - Remote Buffer Overflow (Metasploit)↗2010-11-14
▶
CVE-2010-2639 — Sensitive Information Exposure in IBM | cvebase