CVE-2023-42010: IBM Sterling B2B Integrator Standard Edition information disclosure
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 could disclose sensitive information in the HTTP response using man in the middle techniques. IBM X-Force ID: 265507.
Other sources
IBM Sterling B2B Integrator Standard Edition could disclose sensitive information in the HTTP response using man in the middle techniques.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-42010?
CVE-2023-42010 is considered to have a moderate severity level due to the potential disclosure of sensitive information.
How do I fix CVE-2023-42010?
To fix CVE-2023-42010, update IBM Sterling B2B Integrator to a version above 6.2.0.2 or 6.1.2.5.
What versions of IBM Sterling B2B Integrator are affected by CVE-2023-42010?
CVE-2023-42010 affects IBM Sterling B2B Integrator versions from 6.0.0.0 to 6.1.2.5 and 6.2.0.0 to 6.2.0.2.
What does CVE-2023-42010 exploit?
CVE-2023-42010 exploits man-in-the-middle techniques to disclose sensitive information in the HTTP response.
Is there a known workaround for CVE-2023-42010?
There are no known workarounds for CVE-2023-42010; updating to a patched version is recommended.