CVE-2024-27263 — Channel Accessible by Non-Endpoint in IBM Sterling B2B Integrator

CWE-300 — Channel Accessible by Non-Endpoint3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.1%
top 69.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Sterling B2B Integrator
Timeline
PublishedJan 28

Description

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to obtain sensitive information from the dashboard UI using man in the middle techniques.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.6 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/sterling_b2b_integrator6.0.0.0 — 6.1.2.5+1
▶NVDibm/sterling_b2b_integrator6.0.0.0 — 6.1.2.5+1

🔴Vulnerability Details

2
GHSA
GHSA-528c-fcjh-q2j7: IBM Sterling B2B Integrator 6↗2025-01-28
▶
CVEList
IBM Sterling B2B Integrator information disclosure↗2025-01-28
▶
CVE-2024-27263 — Channel Accessible by Non-Endpoint | cvebase