CVEvulnerability

CVE-2021-39087

6.5 MEDIUM Published 2022-08-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 3.0 ([email protected])
4.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-276

Description

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109.

Affected configurations

• ibm sterling b2b integrator (>= 6.0.0.0 < 6.0.3.6) • ibm sterling b2b integrator (>= 6.1.0.0 < 6.1.0.5) • ibm sterling b2b integrator (>= 6.1.1.0 < 6.1.1.2)

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References