Skip to content
Sign in
Not rated

CVE-2016-0210 IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information

Description

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP response.

Affected products and versions

Product Affected versions Fixed in
Sterling B2B Integrator 5.2 5.2 → 5.2.6 No fix stated
Sterling B2B Integrator 5.1 No fix stated
Sterling B2B Integrator 5.0 No fix stated
Sterling B2B Integrator 4.3 No fix stated

Other CVEs of Sterling B2B Integrator

The 2 CVEs of Sterling B2B Integrator →
CVE-2016-6020 IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open… Not rated
Track this CVE