Non notée
CVE-2016-0210 IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information
Description
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP response.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sterling B2B Integrator 5.2 | 5.2 → 5.2.6 | Pas de correctif indiqué |
| Sterling B2B Integrator | 5.1 | Pas de correctif indiqué |
| Sterling B2B Integrator | 5.0 | Pas de correctif indiqué |
| Sterling B2B Integrator | 4.3 | Pas de correctif indiqué |