CVE-2016-0210: Infoleak

Published Feb 8, 2017

Updated

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to obtain sensitive information. By allowing HTTP OPTIONS method, a remote attacker could send a specially-crafted query to a vulnerable server running to cause the server to disclose sensitive information in the HTTP response.

Affected Software

2 affected components

IBM Sterling B2B Integrator=5.1

IBM Sterling B2B Integrator=5.2

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg21981549

Event History

Feb 8, 2017

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionWeakness

Data Sourced

via NVD·10:59 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-0210?

CVE-2016-0210 is considered a medium severity vulnerability due to the potential for sensitive data exposure.

How do I fix CVE-2016-0210?

To fix CVE-2016-0210, disable the HTTP OPTIONS method on the affected IBM Sterling B2B Integrator servers.

What systems are affected by CVE-2016-0210?

CVE-2016-0210 affects IBM Sterling B2B Integrator versions 5.1 and 5.2.

What type of attack is related to CVE-2016-0210?

CVE-2016-0210 involves a remote attacker exploiting the HTTP OPTIONS method to retrieve sensitive information.

Is there a workaround for CVE-2016-0210?

The primary workaround for CVE-2016-0210 is to configure web servers to block the HTTP OPTIONS method.