Lucene search

IBM66B6605827BC63A5C14FE1E249A2FD159B31312313C5A5843B7AEFCA77FC6972

HistoryAug 15, 2022 - 3:50 p.m.

Security Bulletin: IBM Sterling B2B Integrator Dashboard UI is vulnerable to sensitive information exposure (CVE-2021-39087)

2022-08-1515:50:15

www.ibm.com

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

23.9%

JSON

Summary

IBM Sterling B2B Integrator dashboard UI has addressed a sensitive information exposure security vulnerability.

Vulnerability Details

CVEID:CVE-2021-39087
**DESCRIPTION:**IBM Sterling B2B Integrator Standard Edition could allow an authenticated user to obtain sensitive information due to improper permission controls.
CVSS Base score: 4.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/216109 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s)	APAR(s)	Version(s)
IBM Sterling B2B Integrator	IT39422	6.0.0.0 - 6.0.3.5
IBM Sterling B2B Integrator	IT39422	6.1.0.0 - 6.1.0.4
IBM Sterling B2B Integrator	IT39422	6.1.1.0 - 6.1.1.1

Remediation/Fixes

Product(s)	Version(s)	Remediation/Fix
IBM Sterling B2B Integrator	6.0.0.0 - 6.0.3.5	Apply IBM Sterling B2B Integrator version 6.0.3.6 on Fix Central
IBM Sterling B2B Integrator	6.1.0.0 - 6.1.0.4	Apply IBM Sterling B2B Integrator version 6.1.0.5 on Fix Central
IBM Sterling B2B Integrator	6.1.1.0 - 6.1.1.1	Apply IBM Sterling B2B Integrator version 6.1.1.2 on Fix Central

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmsterling_b2b_integratorMatch6.0.0.0

ibmsterling_b2b_integratorMatch6.1.2.0

CPENameOperatorVersion
ibm sterling b2b integratoreq6.0.0.0
ibm sterling b2b integratoreq6.1.2.0

CPE	Name	Operator	Version
	ibm sterling b2b integrator	eq	6.0.0.0
	ibm sterling b2b integrator	eq	6.1.2.0

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

23.9%

JSON

Related for 66B6605827BC63A5C14FE1E249A2FD159B31312313C5A5843B7AEFCA77FC6972