CVE-2014-6211

Published: May 20, 2015Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The command-line scripts in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 2 through 8, when debugging is configured, do not properly restrict the logging of personal data, which allows local users to obtain sensitive information by reading a log file.

Affected (22)

Products: Ibm: Websphere Commerce

Ibm

1 product

Websphere Commerce

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Commerce	Version 6.0.0.0
Ibm Websphere Commerce	Version 6.0.0.10
Ibm Websphere Commerce	Version 6.0.0.11
Ibm Websphere Commerce	Version 6.0.0.1
Ibm Websphere Commerce	Version 6.0.0.2
Ibm Websphere Commerce	Version 6.0.0.3
Ibm Websphere Commerce	Version 6.0.0.4
Ibm Websphere Commerce	Version 6.0.0.5
Ibm Websphere Commerce	Version 6.0.0.6
Ibm Websphere Commerce	Version 6.0.0.7
Ibm Websphere Commerce	Version 6.0.0.8
Ibm Websphere Commerce	Version 6.0.0.9
Ibm Websphere Commerce	Version 7.0.0.1
Ibm Websphere Commerce	Version 7.0.0.2
Ibm Websphere Commerce	Version 7.0.0.3
Ibm Websphere Commerce	Version 7.0.0.4
Ibm Websphere Commerce	Version 7.0.0.5
Ibm Websphere Commerce	Version 7.0.0.6
Ibm Websphere Commerce	Version 7.0.0.7
Ibm Websphere Commerce	Version 7.0.0.8
Ibm Websphere Commerce	Version 7.0.0.9
Ibm Websphere Commerce	Version 7.0