{"id":"CVE-2021-29758","state":"PUBLISHED","title":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper acc","description":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169.","publishedAt":"2021-10-06T17:10:31.485Z","updatedAt":"2024-09-16T19:56:42.709Z","severity":{"score":4.3,"label":"Medium","version":"3.0","vector":"CVSS:3.0/C:N/AC:L/S:U/I:L/AV:N/UI:N/PR:L/A:N/RC:C/E:U/RL:O","source":"ibm"},"assigner":"ibm","products":["IBM Sterling B2B Integrator"],"affected":[{"vendor":"IBM","product":"Sterling B2B Integrator","versions":[{"version":"6.0.0.0","status":"affected"},{"version":"5.2.0.0","status":"affected"},{"version":"6.0.1.0","status":"affected"},{"version":"6.1.0.0","status":"affected"},{"version":"6.0.3.4","status":"affected"},{"version":"6.1.0.3","status":"affected"},{"version":"5.2.6.5_4","status":"affected"},{"version":"6.0.0.6","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/6495969","https://exchange.xforce.ibmcloud.com/vulnerabilities/202169"],"weaknesses":[],"ingestedAt":"2026-10-29T19:48:21.578Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/29xxx/CVE-2021-29758.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-29758","state":"PUBLISHED","datePublished":"2021-10-06T17:10:31.485Z","dateUpdated":"2024-09-16T19:56:42.709Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2021-03-31T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169."}],"affected":[{"vendor":"IBM","product":"Sterling B2B Integrator","versions":[{"version":"6.0.0.0","status":"affected"},{"version":"5.2.0.0","status":"affected"},{"version":"6.0.1.0","status":"affected"},{"version":"6.1.0.0","status":"affected"},{"version":"6.0.3.4","status":"affected"},{"version":"6.1.0.3","status":"affected"},{"version":"5.2.6.5_4","status":"affected"},{"version":"6.0.0.6","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6495969","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/202169","name":"ibm-sterling-cve202129758-access-control (202169)","tags":["vdb-entry","x_refsource_XF"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","exploitCodeMaturity":"UNPROVEN","integrityImpact":"LOW","privilegesRequired":"LOW","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":3.8,"temporalSeverity":"LOW","userInteraction":"NONE","vectorString":"CVSS:3.0/C:N/AC:L/S:U/I:L/AV:N/UI:N/PR:L/A:N/RC:C/E:U/RL:O","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Gain Access","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2021-10-06T17:10:31.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2021-10-05T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2021-10-05T00:00:00","ID":"CVE-2021-29758","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Sterling B2B Integrator","version":{"version_data":[{"version_value":"6.0.0.0"},{"version_value":"5.2.0.0"},{"version_value":"6.0.1.0"},{"version_value":"6.1.0.0"},{"version_value":"6.0.3.4"},{"version_value":"6.1.0.3"},{"version_value":"5.2.6.5_4"},{"version_value":"6.0.0.6"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"L","AV":"N","C":"N","I":"L","PR":"L","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Gain Access"}]}]},"references":{"reference_data":[{"name":"https://www.ibm.com/support/pages/node/6495969","refsource":"CONFIRM","title":"IBM Security Bulletin 6495969 (Sterling B2B Integrator)","url":"https://www.ibm.com/support/pages/node/6495969"},{"name":"ibm-sterling-cve202129758-access-control (202169)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/202169"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6495969","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/202169","name":"ibm-sterling-cve202129758-access-control (202169)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T22:18:02.494Z"}}]}}}