Lucene search

CVE-2022-22371

🗓️ 05 Jan 2023 07:09:15Reported by ibmType

"IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change, allowing authenticated user to impersonate another user.

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
vulnrichment	CVE-2022-22371 IBM Sterling B2B Integrator Standard Edition session fixation	4 Jan 202317:31	–	vulnrichment
prion	Session fixation	5 Jan 202307:15	–	prion
cvelist	CVE-2022-22371 IBM Sterling B2B Integrator Standard Edition session fixation	4 Jan 202317:31	–	cvelist
ibm	Security Bulletin: Dashboard of IBM Sterling B2B Integrator is vulnerable to session mismanagment (CVE-2022-22371)	26 Mar 202503:26	–	ibm
cnvd	IBM Sterling B2B Integrator Session Fixation Vulnerability	11 Jan 202300:00	–	cnvd
nvd	CVE-2022-22371	5 Jan 202307:15	–	nvd

Nvd

Vulners

Node

ibm sterling_b2b_integratorRange6.0.0.0–6.0.3.6standard

ibm sterling_b2b_integratorRange6.1.0.0–6.1.0.5standard

ibm sterling_b2b_integratorRange6.1.1.0–6.1.1.1standard

ibm sterling_b2b_integratorMatch6.1.2.0standard

AND

ibm aixMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Sterling B2B Integrator Standard Edition",
    "vendor": "IBM",
    "versions": [
      {
        "lessThan": "6.1.2.1",
        "status": "affected",
        "version": "6.0.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6852461
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/221195

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Jan 2023 07:15Current

5.8Medium risk

Vulners AI Score5.8

CVSS35.5 - 6.5

EPSS0.00024

SSVC

CWE-613