IBM WebSphere Commerce Before 6.0.0.7 Multiple Unspecified Security Vulnerabilities

Bugtraq ID:	36160
Class:	Unknown
CVE:	CVE-2008-6973
Remote:	Yes
Local:	No
Published:	Dec 22 2008 12:00AM
Updated:	Dec 22 2008 12:00AM
Credit:	IBM
Vulnerable:	IBM WebSphere Commerce 6.0.0.6 IBM WebSphere Commerce 6.0.0.5 IBM WebSphere Commerce 6.0.0.4 IBM WebSphere Commerce 6.0.0.3 IBM WebSphere Commerce 6.0.0.2 IBM WebSphere Commerce 6.0.0.1 IBM WebSphere Commerce 6.0.0.0
Not Vulnerable:	IBM WebSphere Commerce 6.0.0.7

IBM WebSphere Commerce Before 6.0.0.7 Multiple Unspecified Security Vulnerabilities

IBM WebSphere Commerce is prone to multiple unspecified security vulnerabilities.

Very little is known about these issues or their effects at this time. We will update this BID as more information emerges.

Versions prior to Commerce 6.0.0.7 are vulnerable.

IBM WebSphere Commerce Before 6.0.0.7 Multiple Unspecified Security Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM WebSphere Commerce Before 6.0.0.7 Multiple Unspecified Security Vulnerabilities

Solution:
The vendor has released fixes. Please see the references for details.

IBM WebSphere Commerce Before 6.0.0.7 Multiple Unspecified Security Vulnerabilities

References:

• IBM Websphere Homepage (IBM)
  
• WebSphere Commerce Version 6.0.0.7 Fix Pack (IBM)
  
• WebSphere Commerce Version 6.0.0.8 (IBM)