Lucene search

[email protected]NVD:CVE-2022-22371

HistoryJan 05, 2023 - 7:15 a.m.

CVE-2022-22371

2023-01-0507:15:09

CWE-613

[email protected]

web.nvd.nist.gov

ibm

sterling b2b integrator

session invalidation

password change

impersonation

authenticated user

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

JSON

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 221195.

Affected configurations

NVD

Node

ibmaixMatch-

linuxlinux_kernelMatch-

microsoftwindowsMatch-

AND

ibmsterling_b2b_integratorRange6.0.0.0–6.0.3.6standard

ibmsterling_b2b_integratorRange6.1.0.0–6.1.0.5standard

ibmsterling_b2b_integratorRange6.1.1.0–6.1.1.1standard

ibmsterling_b2b_integratorMatch6.1.2.0standard

References

exchange.xforce.ibmcloud.com/vulnerabilities/221195

www.ibm.com/support/pages/node/6852461

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

JSON

Related for NVD:CVE-2022-22371

cve1 cnvd1 cvelist1 prion1 ibm1