EUVD-2015-7334

Malware in sbrugna...

Security Bulletin: Session management vulnerability affects IBM Sterling B2B Integrator (CVE-2017-1152)

Summary IBM Sterling Global Integration On-Demand Environment does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. Vulnerability Details CVEID: CVE-2017-1152 DESCRIPTION: IBM Sterling Global Integration On-Deman...

CVE-2015-7410

IBM CVE-2015-7410 affects IBM Sterling B2B Integrator 5.2 (Health Check tool). The vulnerability is due to cookies not being properly handled with HTTPS sessions, enabling cookie hijacking via MITM-type scenarios. Affected product/version: IBM Sterling B2B Integrator 5.2. Remediation/fix: apply t...

CVE-2015-7410

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors...

PT-2016-3763

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator version 5.2 Description The issue concerns the Health Check tool in IBM Sterling B2B Integrator, which does not properly utilize cookies in conjunction with HTTPS sessions. This allows man-in-the-middle attackers to...