Security Bulletin: B2B API of IBM Sterling B2B Integrator is vulnerable to Cross Origin Resource Sharing (CORS) (CVE-2021-38928)

Summary IBM Sterling B2B Integrator has addressed the Cross Origin Sharing vulnerability in B2B API Vulnerability Details CVEID:CVE-2021-38928 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged...

CVE-2021-38928

creationtimestamp| type| source ---|---|--- 2023-01-04 20:18:14+00:00| seen| Telegram/ac1a8RAtSDGaEKyOSRQkmvYzBdYTU7GdmboMf5E6CUjB7c...

CVE-2021-38928 IBM Sterling B2B Integrator Standard Edition cross-origin resource sharing

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 210323...

CVE-2021-38928

CVE-2021-38928 affects IBM Sterling B2B Integrator Standard Edition (versions 6.0.0.0–6.1.2.1). The issue is a Cross-Origin Resource Sharing (CORS) misconfiguration: the B2B API could allow an attacker to perform privileged actions and retrieve sensitive information because the allowed domains ar...