Low severity · published Jul 17, 2024
CVE-2023-42010
IBM Sterling B2B Integrator Standard Edition information disclosure
3.7
CVSS
0.3%
EPSS
No
On KEV
Description
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 could disclose sensitive information in the HTTP response using man in the middle techniques. IBM X-Force ID: 265507.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SB
Sterling B2B Integrator Standard Edition · IBM
6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.2 · source: vendor
SB
Sterling B2b Integrator · Ibm
6.0.0.0 through 6.1.2.5; 6.2.0.0 through 6.2.0.2 · source: NVD
Affected product
SB
Sterling B2B Integrator Standard Edition
IBM
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-42010
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-42010
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/265507
Vendor Advisory
https://www.ibm.com/support/pages/node/7160433
More from Sterling B2B Integrator Standard Edition
5.5
CVE-2023-25682
IBM Sterling B2B Integrator information disclosure