Potential Security Risk for WebSphere Commerce: PK81387

Link: http://www-01.ibm.com/support/docview.wss?uid=swg21380417

Flash (Alert)

Abstract
All WebSphere Commerce sites may be affected by a security risk found in WebSphere Application Server.

Content
As WebSphere Commerce is used with WebSphere Application Server, the following vulnerability can exist:

In the WebSphere Application Server, there is a security risk where an attacker can remotely display or execute files in the WAR file. This includes the files in the WEB-INF and META-INF directories.

The following link provides information and instructions on how to apply interim fixes to resolve the security risk. Please verify and locate the relevant WebSphere Application Server version and apply the recommended fix:

Potential risk when using Web based applications on WebSphere Application Server(PK81387)