3140 matches found
PT-2017-10409
Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition version 5.2 Description The issue is related to improper access control, which could allow an authenticated user to obtain sensitive information, such as account lists. Recommendations For IBM...
IBM Sterling B2B Integrator Security Bypass Vulnerability (CNVD-2017-15934)
IBM Sterling B2B Integrator supports highly secure integration of complex B2B processes with diverse partner communities. A security bypass vulnerability exists in IBM Sterling B2B Integrator version 5.2 that stems from the program failing to properly restrict user requests. An attacker could...
CVE-2016-9982: Exposure of Sensitive Information to an Unauthorized Actor
IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due to improper access control. IBM X-Force ID: 120274...
CVE-2016-9983: Exposure of Sensitive Information to an Unauthorized Actor
IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to. IBM X-Force ID: 120275...
QNAP QTS Privilege Escalation / Information Disclosure
QNAP QTS Domain Privilege Escalation Vulnerability Name Sensitive Data Exposure in QNAP QTS Systems Affected QNAP QTS NAS all model and all versions 4.2.4 Severity High 7.9/10 Impact CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Vendor http://www.qnap.com/ Advisory...
Information disclosure
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP...
CVE-2016-0210
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP...
CVE-2016-0210
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP...
CVE-2016-0210
CVE-2016-0210 affects IBM Sterling B2B Integrator Standard Edition. A remote attacker could obtain sensitive information by abusing the HTTP OPTIONS method, causing disclosure in HTTP responses. Affected: Sterling B2B Integrator 5.1 and 5.2. Remediation: apply Fix Pack 5105 for 5.1 or Generic Int...
PT-2017-7593
Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition affected versions not specified Description The issue allows a remote attacker to obtain sensitive information by exploiting the HTTP OPTIONS method. A specially-crafted query sent to a vulnerable...
CVE-2016-0210: Exposure of Sensitive Information to an Unauthorized Actor
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP...
CVE-2016-6020
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to ...
CVE-2016-6020
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to ...
Open redirect
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to ...
CVE-2016-6020
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to ...
CVE-2016-6020
CVE-2016-6020 (IBM Sterling B2B Integrator) is an open-redirect/phishing vulnerability in IBM Sterling B2B Integrator Standard Edition. The issue allows a remote attacker to lure a victim to a crafted site and spoof the displayed URL, redirecting to a malicious site and potentially exfiltrating s...
PT-2017-8848
Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition affected versions not specified Description The issue allows a remote attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially-crafted Web site...
CVE-2016-6020: URL Redirection to Untrusted Site
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to ...
IBM Sterling B2B Integrator Open Redirect Vulnerability
IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An open redirection vulnerability exists in IBM Sterling B2B...