PT-2023-13777 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Published 2023-02-17 · Updated 2023-03-01 · CVE-2022-40232

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition versions 6.1.0.0 through 6.1.1.1 IBM Sterling B2B Integrator Standard Edition version 6.1.2.0

Description The issue allows an authenticated user to perform actions they should not have access to due to improper permission controls.

Recommendations For IBM Sterling B2B Integrator Standard Edition versions 6.1.0.0 through 6.1.1.1, update to a version that includes proper permission controls. For IBM Sterling B2B Integrator Standard Edition version 6.1.2.0, update to a version that includes proper permission controls. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2022-40232

Affected Products

Ibm Sterling B2B Integrator Standard Edition

References · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/235597 · Vendor Advisory
• https://ibm.com/support/pages/node/6954465 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-40232 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40232 · Security Note
• https://t.me/cvenotify/44581 · Telegram Post
• https://t.me/cibsecurity/58461 · Telegram Post
• https://t.me/cvenotify/45273 · Telegram Post