Cross-Site Request Forgery in IBM Sterling B2B Integrator

CVE-2023-38739

What is CVE-2023-38739?

IBM Sterling B2B Integrator versions 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 are susceptible to a cross-site request forgery vulnerability. This flaw may allow an attacker to perform unauthorized actions by exploiting the trust established with a user of the application. If successfully executed, the attacker could leverage this vulnerability to manipulate user sessions, potentially leading to data breaches or unauthorized data modifications.

References