Security Bulletin: IBM Sterling B2B Integrator Is Vulnerable to Phishing Attack (CVE-2016-6020)

Summary IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. Vulnerability Details CVEID: CVE-2016-6020 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing...

CVE-2016-6020

CVE-2016-6020 (IBM Sterling B2B Integrator) is an open-redirect/phishing vulnerability in IBM Sterling B2B Integrator Standard Edition. The issue allows a remote attacker to lure a victim to a crafted site and spoof the displayed URL, redirecting to a malicious site and potentially exfiltrating s...