HTTP Responses Vulnerable to Sensitive Information Disclosure

CVE-2023-42010

Summary

IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 are susceptible to a vulnerability that could reveal sensitive information through HTTP responses. This vulnerability is primarily exploitable using man-in-the-middle techniques, potentially allowing malicious actors to intercept and view confidential data during transmission. Organizations using the affected versions should review their security protocols and apply necessary fixes to mitigate the risks involved.

References