PT-2023-9273 · Ibm · Ibm Sterling B2B Integrator Standard Edition
CVE-2023-42010
·
Publicado
2023-09-06
·
Atualizado
2024-10-19
CVSS v3.1
3.7
Baixa
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.1.2.5
IBM Sterling B2B Integrator Standard Edition versions 6.2.0.0 through 6.2.0.2
Description
The issue is related to the disclosure of system data to unauthorized individuals. It may allow a remote attacker to implement a man-in-the-middle attack, potentially disclosing sensitive information in the HTTP response.
Recommendations
For versions 6.0.0.0 through 6.1.2.5, consider restricting access to sensitive information to minimize the risk of exploitation.
For versions 6.2.0.0 through 6.2.0.2, consider implementing additional security measures to prevent man-in-the-middle attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Sterling B2B Integrator Standard Edition