Unrated severityNVD Advisory· Published Aug 24, 2009· Updated Apr 23, 2026
CVE-2009-2956
CVE-2009-2956
Description
The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient access control, which allows remote attackers to discover passwords, and database and filesystem details, via direct requests for configuration files.
Affected products
1- cpe:2.3:a:ibm:websphere_commerce_suite:*:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.