Security Bulletin: Information disclosure vulnerability affects IBM Sterling B2B Integrator (CVE-2015-7437)

Summary

IBM Sterling B2B Integrator Queue Watcher displays sensitive information.

Vulnerability Details

CVEID: CVE-2015-7437**
DESCRIPTION:** IBM Sterling B2B Integrator Standard Edition could allow a local user to obtain sensitive information via Queue Watcher.
CVSS Base Score: 5.5
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/107962&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)

Affected Products and Versions

Sterling Integrator 5.1

IBM Sterling B2B Integrator 5.2

Remediation/Fixes

Product & Version

| APAR|Remediation/Fix
—|—|—
Sterling Integrator 5.1| IC99482| Apply Generic Interim Fix 5010004_9 available on IWM
IBM Sterling B2B Integrator 5.2| IC99482| Apply Fix Pack 5020600 available on Fix Central

Workarounds and Mitigations

None