NVD

Id
33775  
Name
CVE-2014-6211  
Description
The command-line scripts in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 2 through 8, when debugging is configured, do not properly restrict the logging of personal data, which allows local users to obtain sensitive information by reading a log file.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-05-19  
Modified Date
2017-01-02  
Seq
2014-6211  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
175296 33775 CVE-2014-6211 JR52117  View
175297 33775 CVE-2014-6211 JR52983  View
175298 33775 CVE-2014-6211 http://www-01.ibm.com/support/docview.wss?uid=swg21883875  View
175299 33775 CVE-2014-6211 1032248  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19176 JVNDB-2014-008053 IBM WebSphere Commerce の command-line スクリプトにおける重要な情報を取得される脆弱性 IBM WebSphere Commerce の command-line スクリプトは、デバッグが設定されている場合、個人データのロギングを適切に制限しないため、重要な情報を取得される脆弱性が存在します。 CVE-2014-6211 73502 CVE-2014-6211 33775 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008053.html 2014-09-02 2015-05-21 View