CVE-2024-45089

MEDIUM

IBM Sterling B2B Integrator <6.2.0.3 - Info Disclosure

Title source: llm

Description

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition EBICS server could allow an authenticated user to obtain sensitive filename information due to an observable discrepancy.

References (1)

[Vendor Advisory] https://www.ibm.com/support/pages/node/7182063

Scores

CVSS v3 4.3

EPSS 0.0019

EPSS Percentile 40.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-203

Status published

Products (1)

ibm/sterling_b2b_integrator 6.0.0.0 - 6.1.2.5

Published Jan 31, 2025

Tracked Since Feb 18, 2026