Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-05237
HistoryJan 11, 2023 - 12:00 a.m.

IBM Sterling B2B Integrator session fixation vulnerability

2023-01-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
ibm sterling b2b integrator
session fixation
vulnerability
authentication
password change
exploitation
system

0.0005 Low

EPSS

Percentile

18.2%

IBM Sterling B2B Integrator is a suite of software from International Business Machines (IBM) that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with different partner communities.IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.1.2.1 contain a session fixation vulnerability that stems from a password change that does not invalidate the session and can be exploited by an authenticated attacker to The vulnerability can be exploited by an authenticated attacker to impersonate another user on the system.

0.0005 Low

EPSS

Percentile

18.2%

Related for CNVD-2023-05237