PT-2024-10429 · Ibm · Ibm Sterling B2B Integrator

Published 2024-11-14 · Updated 2025-01-28 · CVE-2024-27263

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 6.0.0.0 through 6.1.2.5 IBM Sterling B2B Integrator versions 6.2.0.0 through 6.2.0.1

Description The issue is related to the dashboard UI of IBM Sterling B2B Integrator, where an authenticated user could obtain sensitive information using man-in-the-middle techniques. This could allow a remote attacker to implement a man-in-the-middle attack.

Recommendations For IBM Sterling B2B Integrator versions 6.0.0.0 through 6.1.2.5, consider restricting access to the dashboard UI to minimize the risk of exploitation. For IBM Sterling B2B Integrator versions 6.2.0.0 through 6.2.0.1, consider restricting access to the dashboard UI to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-300

Related Identifiers

BDU:2025-00961

CVE-2024-27263

Affected Products

Ibm Sterling B2B Integrator

References · 9

• https://osv.dev/vulnerability/CVE-2024-27263 · Vendor Advisory
• https://ibm.com/support/pages/node/7176072 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27263 · Security Note
• https://bdu.fstec.ru/vul/2025-00961 · Security Note
• https://public.dhe.ibm.com/software/commerce/doc/sb2bi/v5r2/SI52_Dashboard_Book.pdf · Note
• https://twitter.com/VulmonFeeds/status/1884174971624181987 · Twitter Post
• https://twitter.com/CVEnew/status/1884183335611818493 · Twitter Post
• https://t.me/cvenotify/108806 · Telegram Post
• https://t.me/cvedetector/16569 · Telegram Post