Code injection

2018-07-2016:29:00

PRIOn knowledge base

www.prio-n.com

4.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.5%

JSON

IBM Sterling B2B Integrator 5.2 through 5.2.6 could allow an authenticated attacker to obtain sensitive variable name information using specially crafted HTTP requests. IBM X-Force ID: 133180.

CPENameOperatorVersion
sterling_b2b_integratorge5.2.0.1
sterling_b2b_integratorle5.2.6.3

CPE	Name	Operator	Version
	sterling_b2b_integrator	ge	5.2.0.1
	sterling_b2b_integrator	le	5.2.6.3

References

www.ibm.com/support/docview.wss?uid=ibm10716747

www.securityfocus.com/bid/104927

exchange.xforce.ibmcloud.com/vulnerabilities/133180