Security Bulletin: Eclipse Jetty Vulnerability Affects IBM Sterling B2B Integrator (CVE-2020-27216)

Summary IBM Sterling B2B Integrator has addressed the security vulnerability from Eclipse Jetty. Vulnerability Details CVEID:CVE-2020-27216 DESCRIPTION: Eclipse Jetty could allow a local authenticated attacker to gain elevated privileges on the system, caused by a race condition in the creation o...

Security Bulletin: Multiple Security Vulnerabilities in IBM WebSphere Application Server Affect IBM Sterling B2B Integrator

Summary IBM Sterling B2B Integrator has addressed the security vulnerabilities. Vulnerability Details CVEID: CVE-2020-4590 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of...

Security Bulletin: Cross-Site Scripting vulnerability affects IBM Sterling B2B Integrator (CVE-2020-4657)

Summary IBM Sterling B2B Integrator has addressed a XSS vulnerability. Vulnerability Details CVEID:CVE-2020-4657 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...

Security Bulletin: Deserialization Vulnerability Affects IBM Sterling B2B Integrator (CVE-2019-4728)

Summary IBM Sterling B2B Integrator has addressed the deserialization vulnerability. Vulnerability Details CVEID: CVE-2019-4728 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrust...

Security Bulletin: IBM Sterling B2B Integrator is vulnerable to cross-site request forgery (CVE-2020-4668)

Summary IBM Sterling B2B Integrator is vulnerable to cross-site request forgery in the EBICS client. The vulnerability has been addressed. Vulnerability Details CVEID: CVE-2020-4668 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site request forgery which could...

Security Bulletin: Multiple Security Vulnerabilities in Jackson-Databind Affects IBM Sterling B2B Integrator

Summary IBM Sterlilng B2B Integrator has addressed the security vulnerabilities. Vulnerability Details CVEID:CVE-2020-36185 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization between gadgets and typing...

Security Bulletin: Apache WSS4J Vulnerabilities Affect IBM Sterling B2B Integrator

Summary IBM Sterling B2B Integrator has addressed the security vulnerablities from WSS4J. Vulnerability Details CVEID:CVE-2015-0227 DESCRIPTION: Apache WSS4J could allow a remote attacker to bypass security restrictions, caused by the failure to properly enforce the...

Security Bulletin: Access Control Security Vulnerability Exists in Dashboard User Interface of IBM Sterling B2B Integrator (CVE-2020-4646)

Summary IBM Sterling B2B Integrator has addressed the vulnerability. Vulnerability Details CVEID:CVE-2020-4646 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an authenticated user to view pages they shoiuld not have access to due to improper authorization control. CVSS Base...

Security Bulletin: Cross-Site Scripting Vulnerability Affects the Dashboard User Interface of IBM Sterling B2B Integrator (CVE-2021-20553)

Summary IBM Sterling B2B Integrator has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-20553 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web ...

Security Bulletin: IBM Sterling B2B Integrator vulnerable to cross-site Ajax request vulnerability due to Prototype JavaScript (CVE-2008-7220)

Summary IBM Sterling B2B Integrator uses Prototype Javascript framework prototypejs which is vulnerable to cross-site Ajax request. The issue has been addressed. Vulnerability Details CVEID:CVE-2008-7220 DESCRIPTION: An unspecified error in the Prototype JavaScript framework prototypejs, as used ...

Security Bulletin: IBM Sterling B2B Integrator vulnerable to multiple vulnerabilities due to Spring Security

Summary Spring Security is used by IBM Sterling B2B Integrator. Multiple Spring Security vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2019-3795 DESCRIPTION: Pivotal Spring Security could provide weaker than expected security, caused by an insecure randomness flaw when usin...

Security Bulletin: IBM Sterling B2B Integrator is vulnerable to multiple vulnerabilities due to Xstream

Summary Xstream is used by IBM Sterling B2B Integrator. Multiple Xstream vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2021-39141 DESCRIPTION: XStream could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization...

Security Bulletin: Security Vulnerability in Xstream Affects IBM Sterling B2B Integrator (CVE-2020-26217)

Summary IBM Sterling B2B Integrator has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2020-26217 DESCRIPTION: XStream could allow a remote attacker to execute arbitrary code on the system, caused by flaws in the XStream.java and SecurityVulnerabilityTest.java scripts. By...

Security Bulletin: Apache Log4j vulnerability may affect IBM Sterling B2B Integrator (CVE-2021-44228)

Summary IBM Sterling B2B Integrator is impacted by Log4Shell CVE-2021-44228, through the use of Apache Log4j's JNDI logging feature. Final remediation images published below. As an alternative to the final remediation images, manual mitigation steps are also provided below. Vulnerability Details...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2022-31760)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An information disclosure vulnerability exists in IBM Sterlin...

CVE-2021-39033

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

Information disclosure

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2021-39033

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2021-39033

IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0–6.0.3.5 and 6.1.0.0–6.1.1.0 are vulnerable to an information disclosure because a detailed technical error message can be returned in the browser, allowing remote attackers to obtain sensitive information. The IBM security bulletin doc...

IBM Sterling B2B Integrator 安全漏洞

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An information disclosure vulnerability exists in IBM Sterlin...