IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sterling_b2b_integrator | Ibm | 5.2.0.0 (including) | 5.2.6.5 (including) |
| Sterling_b2b_integrator | Ibm | 6.0.0.0 (including) | 6.0.3.1 (including) |