IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x before 7.0.0.8 IF2 allows local users to obtain sensitive database information via unspecified vectors.
http://www.securitytracker.com/id/1032392
http://www-01.ibm.com/support/docview.wss?uid=swg21902799