Lucene search

IbmCVELIST:CVE-2021-39087

HistoryAug 16, 2022 - 6:46 p.m.

CVE-2021-39087

2022-08-1618:46:04

ibm

www.cve.org

ibm

sterling b2b integrator

vulnerability

permission controls

x-force id

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

23.7%

JSON

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109.

CNA Affected

[
  {
    "product": "Sterling B2B Integrator",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.0.0"
      },
      {
        "status": "affected",
        "version": "6.1.0.0"
      },
      {
        "status": "affected",
        "version": "6.1.1.0"
      },
      {
        "status": "affected",
        "version": "6.0.3.5"
      },
      {
        "status": "affected",
        "version": "6.1.0.4"
      },
      {
        "status": "affected",
        "version": "6.1.1.1"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/216109

www.ibm.com/support/pages/node/6612541

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

23.7%

JSON

Related for CVELIST:CVE-2021-39087