CVE-2011-3577

critical

Description

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/69838

http://www.securityfocus.com/bid/49643

http://www.osvdb.org/75428

http://www.ibm.com/support/docview.wss?uid=swg24030908

http://www.ibm.com/support/docview.wss?uid=swg1JR40420

http://secunia.com/advisories/45999

Details

Source: Mitre, NVD

Published: 2011-09-20

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H