NetSight
medium5.3

CVE-2016-0210

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information.

Impact

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP response.

Affected products

VendorProductAffected versions
IbmSterling B2b Integrator
Versions 5.1, 5.2

Weakness classification

References