description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169.
problem types: Gain Access
affected:
{
product: Sterling B2B Integrator
vendor: IBM
versions:
status: affected, version: 6.0.0.0
status: affected, version: 5.2.0.0
status: affected, version: 6.0.1.0
status: affected, version: 6.1.0.0
status: affected, version: 6.0.3.4
status: affected, version: 6.1.0.3
status: affected, version: 5.2.6.5_4
status: affected, version: 6.0.0.6
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
exploitCodeMaturity: UNPROVEN
integrityImpact: LOW
privilegesRequired: LOW
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 3.8
temporalSeverity: LOW
userInteraction: NONE
vectorString: CVSS:3.0/C:N/AC:L/S:U/I:L/AV:N/UI:N/PR:L/A:N/RC:C/E:U/RL:O
version: 3.0
]