title: IBM Sterling B2B Integrator Standard Edition improper access control
description:
IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.
problem types: 284 Improper Access Control
affected:
{
defaultStatus: unaffected
product: Sterling B2B Integrator Standard Edition
vendor: IBM
versions:
lessThan: 6.1.1.1, status: affected, version: 6.1.0.0, versionType: semver
status: affected, version: 6.1.2.0
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL