CVEvulnerability
CVE-2022-40232
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-02-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-276
Description
IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.
Affected configurations
• ibm sterling b2b integrator (>= 6.1.0.0 <= 6.1.1.1)
• ibm sterling b2b integrator 6.1.2.0
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/235597 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6954465 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/235597 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6954465 Patch, Vendor Advisory