CVE Vulnerabilities

CVE-2023-25682

Insertion of Sensitive Information into Log File

Published: Nov 22, 2023 | Modified: Nov 21, 2024
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 247034.

Weakness

The product writes sensitive information to a log file.

Affected Software

NameVendorStart VersionEnd Version
Sterling_b2b_integratorIbm6.0.0.0 (including)6.0.3.9 (excluding)
Sterling_b2b_integratorIbm6.1.0.0 (including)6.1.2.3 (excluding)

Potential Mitigations

References