2 lines
9.9 KiB
JSON
2 lines
9.9 KiB
JSON
{"affected":[{"affectedData":[{"product":"WebSphere Commerce","vendor":"IBM","versions":[{"status":"affected","version":"7.0.0.0"},{"status":"affected","version":"8.0.4.0"},{"status":"affected","version":"8.0.4.14"},{"status":"affected","version":"8.0.3.0"},{"status":"affected","version":"8.0.3.6"},{"status":"affected","version":"8.0.1.0"},{"status":"affected","version":"8.0.1.13"},{"status":"affected","version":"8.0.0.0"},{"status":"affected","version":"8.0.0.19"},{"status":"affected","version":"9.0.0.0"},{"status":"affected","version":"9.0.0.4"},{"status":"affected","version":"8.0.4.3"},{"status":"affected","version":"8.0.4.4"},{"status":"affected","version":"8.0.4.5"},{"status":"affected","version":"8.0.4.6"},{"status":"affected","version":"8.0.4.7"},{"status":"affected","version":"8.0.4.8"},{"status":"affected","version":"8.0.4.9"},{"status":"affected","version":"8.0.4.10"},{"status":"affected","version":"8.0.4.11"},{"status":"affected","version":"8.0.4.12"},{"status":"affected","version":"8.0.4.13"},{"status":"affected","version":"8.0.3.1"},{"status":"affected","version":"8.0.3.2"},{"status":"affected","version":"8.0.3.3"},{"status":"affected","version":"8.0.3.4"},{"status":"affected","version":"8.0.3.5"},{"status":"affected","version":"8.0.4.1"},{"status":"affected","version":"8.0.4.2"},{"status":"affected","version":"8.0.1.1"},{"status":"affected","version":"8.0.1.2"},{"status":"affected","version":"8.0.1.3"},{"status":"affected","version":"8.0.1.4"},{"status":"affected","version":"8.0.1.5"},{"status":"affected","version":"8.0.1.6"},{"status":"affected","version":"8.0.1.7"},{"status":"affected","version":"8.0.1.8"},{"status":"affected","version":"8.0.1.9"},{"status":"affected","version":"8.0.1.10"},{"status":"affected","version":"8.0.1.11"},{"status":"affected","version":"8.0.1.12"},{"status":"affected","version":"8.0.0.1"},{"status":"affected","version":"8.0.0.2"},{"status":"affected","version":"8.0.0.3"},{"status":"affected","version":"8.0.0.4"},{"status":"affected","version":"8.0.0.5"},{"status":"affected","version":"8.0.0.6"},{"status":"affected","version":"8.0.0.7"},{"status":"affected","version":"8.0.0.8"},{"status":"affected","version":"8.0.0.9"},{"status":"affected","version":"8.0.0.10"},{"status":"affected","version":"8.0.0.11"},{"status":"affected","version":"8.0.0.12"},{"status":"affected","version":"8.0.0.13"},{"status":"affected","version":"8.0.0.14"},{"status":"affected","version":"8.0.0.15"},{"status":"affected","version":"8.0.0.16"},{"status":"affected","version":"8.0.0.17"},{"status":"affected","version":"8.0.0.18"},{"status":"affected","version":"9.0.0.1"},{"status":"affected","version":"9.0.0.2"},{"status":"affected","version":"9.0.0.3"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:developer:*:*:*","matchCriteriaId":"4B62A0C9-90E3-4E6B-B38E-1C42771A9682","versionEndIncluding":"8.0.0.19","versionStartIncluding":"8.0.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"0FA13C9C-4C02-43D7-B26A-1E2BC677F809","versionEndIncluding":"8.0.0.19","versionStartIncluding":"8.0.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:express:*:*:*","matchCriteriaId":"2CB4DE96-3BF0-4414-BCD4-0EDACF528D96","versionEndIncluding":"8.0.0.19","versionStartIncluding":"8.0.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:professional:*:*:*","matchCriteriaId":"62202904-9E60-4867-8F8C-78F3ADB35E5D","versionEndIncluding":"8.0.0.19","versionStartIncluding":"8.0.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:developer:*:*:*","matchCriteriaId":"2A9EA16E-66DF-467C-8989-02F0910FBDF1","versionEndIncluding":"8.0.1.13","versionStartIncluding":"8.0.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"336FB46A-F478-4AE5-B13F-D663322CE253","versionEndIncluding":"8.0.1.13","versionStartIncluding":"8.0.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:express:*:*:*","matchCriteriaId":"1E39B661-02F0-411A-BC3F-03F21EE55FEA","versionEndIncluding":"8.0.1.13","versionStartIncluding":"8.0.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:professional:*:*:*","matchCriteriaId":"C69CD787-B3A0-4F5D-B55C-2FD861BA91D8","versionEndIncluding":"8.0.1.13","versionStartIncluding":"8.0.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:developer:*:*:*","matchCriteriaId":"4B55E2F7-6687-47FF-BED6-57116A71F131","versionEndIncluding":"8.0.3.6","versionStartIncluding":"8.0.3.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"69EB2121-48E3-4207-9D23-456E1C41190D","versionEndIncluding":"8.0.3.6","versionStartIncluding":"8.0.3.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:express:*:*:*","matchCriteriaId":"27F388EA-773F-46FE-B4CA-0531DEDFB0D0","versionEndIncluding":"8.0.3.6","versionStartIncluding":"8.0.3.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:professional:*:*:*","matchCriteriaId":"016DC77E-1C40-4FE5-ADBE-D60E7B55D286","versionEndIncluding":"8.0.3.6","versionStartIncluding":"8.0.3.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:developer:*:*:*","matchCriteriaId":"6B2232CA-F919-432A-AB6D-7D1831E53A7F","versionEndIncluding":"8.0.4.14","versionStartIncluding":"8.0.4.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"398CA5FE-4430-474F-B119-8CFD9ABE8296","versionEndIncluding":"8.0.4.14","versionStartIncluding":"8.0.4.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:express:*:*:*","matchCriteriaId":"580B0D48-39C9-4335-8842-A3065BCE3B37","versionEndIncluding":"8.0.4.14","versionStartIncluding":"8.0.4.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:professional:*:*:*","matchCriteriaId":"D55C11E6-1D7F-40E2-8D0C-1D03D52A3473","versionEndIncluding":"8.0.4.14","versionStartIncluding":"8.0.4.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:developer:*:*:*","matchCriteriaId":"F4442A95-E915-4663-B968-1872CC0B634E","versionEndIncluding":"9.0.0.4","versionStartIncluding":"9.0.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:enterprise:*:*:*","matchCriteriaId":"E0761F7F-255C-4D7E-982D-CC83EC999839","versionEndIncluding":"9.0.0.4","versionStartIncluding":"9.0.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:express:*:*:*","matchCriteriaId":"EA470530-44E3-4D4D-84FD-1D90923EAB5E","versionEndIncluding":"9.0.0.4","versionStartIncluding":"9.0.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:*:*:*:*:professional:*:*:*","matchCriteriaId":"539C827B-CCE9-4C5F-BABD-5E4BD753BB7F","versionEndIncluding":"9.0.0.4","versionStartIncluding":"9.0.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:websphere_commerce:7.0:feature_pack_8:*:*:*:*:*:*","matchCriteriaId":"7C20CB96-9E05-4702-94F1-E6C7439FAA13","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 9.0.0.0 - 9.0.0.4, 8.0.0.0 - 8.0.0.19, 8.0.1.0 - 8.0.1.13, 8.0.3.0 - 8.0.3.6, 8.0.4.0 - 8.0.4.14, and 7.0.0.0 Feature Pack 8 could allow an authenticated user to obtain sensitive information about another user."},{"lang":"es","value":"IBM WebSphere Commerce Enterprise, Professional, Express y Developer 9.0.0.0 - 9.0.0.4, 8.0.0.0 - 8.0.0.19, 8.0.1.0 - 8.0.1.13, 8.0.3.0 - 8.0.3.6, 8.0.4.0 - 8.0.4.14 y 7.0.0.0 Feature Pack 8 podrían permitir que un usuario autenticado obtenga información sensible sobre otro usuario."}],"id":"CVE-2018-1644","lastModified":"2026-06-17T01:51:31.867","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":4.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":8.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.1,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.0"},"exploitabilityScore":1.6,"impactScore":1.4,"source":"psirt@us.ibm.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-08-27T14:29:00.867","references":[{"source":"psirt@us.ibm.com","tags":["Vendor Advisory"],"url":"http://www.ibm.com/support/docview.wss?uid=ibm10728829"},{"source":"psirt@us.ibm.com","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/144589"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"http://www.ibm.com/support/docview.wss?uid=ibm10728829"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/144589"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"nvd@nist.gov","type":"Primary"}]}
|