CVE-2017-1193

IBM Sterling B2B Integrator Standard Edition 5.2 is affected by CVE-2017-1193, enabling a user to obtain sensitive information through an HTTP GET request due to improper access controls. The IBM Security Bulletin for CVE-2017-1193 (and related CVE-2017-1302) lists 5.2.6/5.2.x as affected and pro...

IBM Sterling B2B Integrator Local Information Disclosure Vulnerability (CNVD-2017-11332)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A security vulnerability exists in IBM Sterling B2B Integrato...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2017-11308)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A security vulnerability exists in IBM Sterling B2B Integrato...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2017-11331)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An information disclosure vulnerability exists in IBM Sterlin...

CVE-2016-9982

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due to improper access control. IBM X-Force ID: 120274...

Code injection

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to. IBM X-Force ID: 120275...

CVE-2016-9982

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due to improper access control. IBM X-Force ID: 120274...

CVE-2016-9983

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to. IBM X-Force ID: 120275...

CVE-2016-9983

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to. IBM X-Force ID: 120275...

Improper access control

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due to improper access control. IBM X-Force ID: 120274...

CVE-2016-9982

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due to improper access control. IBM X-Force ID: 120274...

CVE-2016-9983

Summary: CVE-2016-9983 affects IBM Sterling B2B Integrator Standard Edition 5.2. An authenticated user with special privileges could view files they should not have access to, indicating an access-control weakness leading to information disclosure. The IBM bulletin for this CVE groups it with CVE...

CVE-2016-9983

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to. IBM X-Force ID: 120275...

CVE-2016-9982

IBM Sterling B2B Integrator Standard Edition 5.2 is affected by CVE-2016-9982 due to improper access control, enabling an authenticated user to obtain sensitive information such as account lists. Remediation per IBM bulletin is to apply the B2B Integrator fix pack 5020603_2, 5020602_4, or 5020601...

IBM Sterling B2B Integrator Security Bypass Vulnerability (CNVD-2017-15934)

IBM Sterling B2B Integrator supports highly secure integration of complex B2B processes with diverse partner communities. A security bypass vulnerability exists in IBM Sterling B2B Integrator version 5.2 that stems from the program failing to properly restrict user requests. An attacker could...

QNAP QTS Privilege Escalation / Information Disclosure

QNAP QTS Domain Privilege Escalation Vulnerability Name Sensitive Data Exposure in QNAP QTS Systems Affected QNAP QTS NAS all model and all versions 4.2.4 Severity High 7.9/10 Impact CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Vendor http://www.qnap.com/ Advisory...

CVE-2016-0210

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP...

Information disclosure

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP...

CVE-2016-0210

CVE-2016-0210 affects IBM Sterling B2B Integrator Standard Edition. A remote attacker could obtain sensitive information by abusing the HTTP OPTIONS method, causing disclosure in HTTP responses. Affected: Sterling B2B Integrator 5.1 and 5.2. Remediation: apply Fix Pack 5105 for 5.1 or Generic Int...

CVE-2016-0210

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP...