2059 matches found
Security Bulletin: Sensitive data protection vulnerability affects IBM Sterling B2B Integrator (CVE-2017-1349)
Summary IBM Sterling B2B Integrator Standard Edition stores potentially sensitive information from HTTP sessions that could be read by a local user. Vulnerability Details CVEID: CVE-2017-1349 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition stores potentially sensitive information from...
Security Bulletin: XML Entity Injection vulnerability affects IBM Sterling B2B Integrator (CVE-2017-1192)
Summary IBM Sterling File Gateway is vulnerable to an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. Vulnerability Details CVEID: CVE-2017-1192 DESCRIPTION: IB...
Security Bulletin: Information Disclosure Security Vulnerability Affects IBM Sterling B2B Integrator (CVE-2018-1679, CVE-2018-1564, CVE-2017-1633)
Summary Security Bulletin: Information disclosure security vulnerability affects IBM Sterling B2B Integrator. Vulnerability Details CVEID: CVE-2018-1679 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an unauthenticated user to obtain sensitive information that could be used...
Security Bulletin: Permission checking vulnerability affects IBM Sterling B2B Integrator (CVE-2017-1326)
Summary IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. Vulnerability Details CVEID: CVE-2017-1326 DESCRIPTION: IBM Sterling File...
Security Bulletin: Information disclosure vulnerability affects IBM Sterling B2B Integrator (CVE-2015-7410)
Summary IBM Sterling B2B Integrator Health Check tool is vulnerable to cookie hijacking for obtaining sensitive information. Vulnerability Details CVEID: CVE-2015-7410 DESCRIPTION: IBM 10x based applications are vulnerable to cookie hijacking for Web Services hosted over HTTPS protocol due to...
Security Bulletin: Multiple Security Vulnerabilities in OpenSSL Affect IBM Sterling B2B Integrator (CVE-2018-0734, CVE-2018-5407)
Summary Security vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator Vulnerability Details CVE-ID: CVE-2018-0734 Description: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a timing side channel attack in the DSA signature algorithm. An attacker could...
Security Bulletin: Password management vulnerability affects IBM Sterling B2B Integrator (CVE-2016-5890)
Summary IBM Sterling B2B Integrator Standard Edition could allow authenticated attacker to change another user's password . Vulnerability Details CVEID: CVE-2016-5890 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition contains an unspecified vulnerability that would allow an authenticated...
Security Bulletin: XML External Entity Injection Security Vulnerability Affects IBM Sterling B2B Integrator (CVE-2019-4043)
Summary IBM Sterling B2B Integrator Standard Edition has addressed the XML External Entity Injection vulnerability Vulnerability Details CVEID: CVE-2019-4043 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to an XML External Entity Injection XXE attack when processing XML...
Security Bulletin: Information Disclosure Security Vulnerability Affects IBM Sterling B2B Integrator (CVE-2017-1481)
Summary Information disclosure security vulnerability affects IBM Sterling B2B Integrator. Vulnerability Details CVEID: CVE-2017-1481 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition allows a user to view sensitive information that belongs to another user. CVSS Base Score: 3.1 CVSS...
Security Bulletin: Multiple IBM MQ Security Vulnerabilities Affect IBM Sterling B2B Integrator
Summary IBM Sterling B2B Integrator Standard Edition has addressed the IBM MQ security vulnerabilities Vulnerability Details CVEID: CVE-2019-4039 DESCRIPTION: IBM MQ 8.0.0.0 through 8.0.0.9, 9.0.0.0 through 9.0.0.6, 9.1.0.0 through 9.1.0.1 and 9.1.1 could allow a local attacker to cause a denial ...
Security Bulletin: Multiple Cross-Site Scripting Vulnerabilities Affect IBM Sterling B2B Integrator (CVE-2019-4027, CVE-2019-4028, CVE-2019-4029)
Summary IBM Sterling B2B Integrator Standard Edition has addressed the cross-scripting vulnerabilities Vulnerability Details CVEID: CVE-2019-4029 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...
Security Bulletin: HTTP verb tampering vulnerability affects IBM Sterling B2B Integrator (CVE-2017-1131)
Summary IBM Sterling B2B Integrator Standard Edition could allow an authenticated user to obtain sensitive information by using unsupported, specially crafted HTTP commands. Vulnerability Details CVEID: CVE-2017-1131 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an...
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator (CVE-2016-0702, CVE-2016-0705, CVE-2016-0798, CVE-2016-0799, CVE-2016-0797).
Summary OpenSSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. OpenSSL is used by IBM Sterling B2B Integrator. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-0702 DESCRIPTION: OpenSSL could allow a local attacker to...
Security Bulletin: User permission vulnerability affects IBM Sterling B2B Integrator (CVE-2017-1326)
Summary IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. Vulnerability Details CVEID: CVE-2017-1326 DESCRIPTION: IBM Sterling File...
Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling File Gateway (CVE-2017-1487)
Summary IBM Sterling File Gateway could allow an authenticated attacker to obtain sensitive information such as login ids on the system. Vulnerability Details CVEID: CVE-2017-1487 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated attacker to obtain sensitive information such as...
Security Bulletin: Multiple Security Vulnerabilities in Jetspeed Affect IBM Sterling B2B Integrator
Summary There are multiple security vulnerabilities in Jetspeed that affect IBM Sterling B2B Integrator Vulnerability Details CVEID: CVE-2016-0711 DESCRIPTION: Apache Jetspeed is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the add a link, page, or...
Security Bulletin: Information Disclosure Security Vulnerability Affects IBM Sterling B2B Integrator (CVE-2019-4063)
Summary IBM Sterling B2B Integrator Standard Edition has addressed the information disclosure vulnerability. Vulnerability Details CVEID: CVE-2019-4063 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker...
Security Bulletin: Vulnerability in Apache Commons BeanUtils Affects IBM Sterling B2B Integrator (CVE-2014-0114)
Summary Apache Commons BeanUtils with Struts 1 does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter. Vulnerability Details CVEID: CVE-2014-0114 DESCRIPTION: Apache Struts could allow a remote attacke...
Security Bulletin: IBM Sterling B2B Integrator Is Vulnerable to Phishing Attack (CVE-2016-6020)
Summary IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. Vulnerability Details CVEID: CVE-2016-6020 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing...
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Sterling B2B Integrator
Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL is used by IBM Sterling B2B Integrator. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2179 DESCRIPTION: OpenSSL is vulnerable to a denial of service. By sending...