CVE-2017-1302

MEDIUM

IBM Sterling B2B Integrator Standard Edition 5.2 - Info Disclosure

Title source: llm

Description

IBM Sterling B2B Integrator Standard Edition 5.2 could allow a local user view sensitive information due to improper access controls. IBM X-Force ID: 125456.

References (3)

[Patch, Vendor Advisory] http://www.ibm.com/support/docview.wss?uid=swg22004202

[VDB Entry, Vendor Advisory] https://exchange.xforce.ibmcloud.com/vulnerabilities/125456

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/99238

Scores

CVSS v3 5.5

EPSS 0.0006

EPSS Percentile 17.6%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (8)

ibm/sterling_b2b_integrator

IBM/Sterling B2B Integrator < 5.2

IBM/Sterling B2B Integrator < 5.2.1

IBM/Sterling B2B Integrator < 5.2.2

IBM/Sterling B2B Integrator < 5.2.3

IBM/Sterling B2B Integrator < 5.2.4

IBM/Sterling B2B Integrator < 5.2.5

IBM/Sterling B2B Integrator < 5.2.6

Published Jun 23, 2017

Tracked Since Feb 18, 2026