CVE-2024-45089

CWE-2033 documents3 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 59.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Sterling B2B Integrator
Timeline
PublishedJan 31

Description

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition EBICS server could allow an authenticated user to obtain sensitive filename information due to an observable discrepancy.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/sterling_b2b_integrator6.0.0.0 — 6.1.2.5+1
▶NVDibm/sterling_b2b_integrator6.0.0.0 — 6.1.2.5+1

🔴Vulnerability Details

2
GHSA
GHSA-hmwv-m7j7-4rfh: IBM Sterling B2B Integrator 6↗2025-01-31
▶
CVEList
IBM Sterling B2B Integrator information disclosure↗2025-01-31
▶
CVE-2024-45089 (MEDIUM CVSS 4.3) | IBM Sterling B2B Integrator 6.0.0.0 | cvebase.io