CVE-2023-42011

2024-06-2718:15:13

CWE-1021

[email protected]

web.nvd.nist.gov

ibm

sterling b2b

integrator

security issue

x-force id

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

Percentile

13.7%

JSON

IBM Sterling B2B Integrator Standard Edition 6.1 and 6.2 does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. IBM X-Force ID: 265508.

Affected configurations

Nvd

Node

ibmsterling_b2b_integratorMatch6.1standard

ibmsterling_b2b_integratorMatch6.2standard

VendorProductVersionCPE
ibmsterling_b2b_integrator6.1cpe:2.3:a:ibm:sterling_b2b_integrator:6.1:*:*:*:standard:*:*:*
ibmsterling_b2b_integrator6.2cpe:2.3:a:ibm:sterling_b2b_integrator:6.2:*:*:*:standard:*:*:*

Vendor	Product	Version	CPE
ibm	sterling_b2b_integrator	6.1	cpe:2.3:a:ibm:sterling_b2b_integrator:6.1::::standard:::
ibm	sterling_b2b_integrator	6.2	cpe:2.3:a:ibm:sterling_b2b_integrator:6.2::::standard:::