Sensitive Information Disclosure in IBM Sterling B2B Integrator Standard Edition
CVE-2024-52905
2.7LOW
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 10 March 2025
Summary
The IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 to 6.1.2.6 and 6.2.0.0 to 6.2.0.3 may allow privileged users to access sensitive database information, potentially compromising data integrity and security. This vulnerability raises significant concerns for organizations relying on this platform for secure business transactions and data management.
Affected Version(s)
Sterling B2B Integrator Standard Edition 6.0.0.0 <= 6.1.2.6
Sterling B2B Integrator Standard Edition 6.2.0.0 <= 6.2.0.3
References
CVSS V3.1
Score:
2.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved