IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.
Weakness
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sterling_b2b_integrator | Ibm | 5.2.0.0 (including) | 5.2.6.5 (including) |
| Sterling_b2b_integrator | Ibm | 6.0.0.0 (including) | 6.0.3.1 (including) |