CVE-2016-6020: Medium severity IBM Sterling B2B Integrator vulnerability
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6020?
The severity of CVE-2016-6020 is classified as high due to its potential to facilitate phishing attacks.
How do I fix CVE-2016-6020?
To fix CVE-2016-6020, apply the relevant security updates or patches provided by IBM for the affected versions of Sterling B2B Integrator.
Which versions of IBM Sterling B2B Integrator are affected by CVE-2016-6020?
CVE-2016-6020 affects IBM Sterling B2B Integrator versions 5.2, 5.2.1, 5.2.2, 5.2.4, 5.2.4.1, 5.2.4.2, 5.2.5, and 5.2.6.
What type of attack can be conducted through CVE-2016-6020?
CVE-2016-6020 enables remote attackers to conduct phishing attacks using an open redirect vulnerability.
What is the primary impact of CVE-2016-6020?
The primary impact of CVE-2016-6020 is the potential for an attacker to spoof URLs, leading to untrusted site access by users.