{"id":"CVE-2021-39087","state":"PUBLISHED","title":"IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive inf","description":"IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109.","publishedAt":"2022-08-16T18:46:04.273Z","updatedAt":"2024-09-17T03:17:43.317Z","severity":{"score":4.3,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AC:L/UI:N/A:N/I:N/PR:L/S:U/C:L/AV:N/RC:C/RL:O/E:U","source":"ibm"},"assigner":"ibm","products":["IBM Sterling B2B Integrator"],"affected":[{"vendor":"IBM","product":"Sterling B2B Integrator","versions":[{"version":"6.0.0.0","status":"affected"},{"version":"6.1.0.0","status":"affected"},{"version":"6.1.1.0","status":"affected"},{"version":"6.0.3.5","status":"affected"},{"version":"6.1.0.4","status":"affected"},{"version":"6.1.1.1","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/6612541","https://exchange.xforce.ibmcloud.com/vulnerabilities/216109"],"weaknesses":[],"ingestedAt":"2026-10-29T19:48:52.666Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/39xxx/CVE-2021-39087.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-39087","state":"PUBLISHED","datePublished":"2022-08-16T18:46:04.273Z","dateUpdated":"2024-09-17T03:17:43.317Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2021-08-16T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109."}],"affected":[{"vendor":"IBM","product":"Sterling B2B Integrator","versions":[{"version":"6.0.0.0","status":"affected"},{"version":"6.1.0.0","status":"affected"},{"version":"6.1.1.0","status":"affected"},{"version":"6.0.3.5","status":"affected"},{"version":"6.1.0.4","status":"affected"},{"version":"6.1.1.1","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6612541","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/216109","name":"ibm-sterling-cve202139087-info-disc (216109)","tags":["vdb-entry","x_refsource_XF"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","exploitCodeMaturity":"UNPROVEN","integrityImpact":"NONE","privilegesRequired":"LOW","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":3.8,"temporalSeverity":"LOW","userInteraction":"NONE","vectorString":"CVSS:3.0/AC:L/UI:N/A:N/I:N/PR:L/S:U/C:L/AV:N/RC:C/RL:O/E:U","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2022-08-16T18:46:04.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2022-08-15T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2022-08-15T00:00:00","ID":"CVE-2021-39087","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Sterling B2B Integrator","version":{"version_data":[{"version_value":"6.0.0.0"},{"version_value":"6.1.0.0"},{"version_value":"6.1.1.0"},{"version_value":"6.0.3.5"},{"version_value":"6.1.0.4"},{"version_value":"6.1.1.1"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive information due to improper permission controls. IBM X-Force ID: 216109."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"L","AV":"N","C":"L","I":"N","PR":"L","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"https://www.ibm.com/support/pages/node/6612541","refsource":"CONFIRM","title":"IBM Security Bulletin 6612541 (Sterling B2B Integrator)","url":"https://www.ibm.com/support/pages/node/6612541"},{"name":"ibm-sterling-cve202139087-info-disc (216109)","refsource":"XF","title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/216109"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6612541","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/216109","name":"ibm-sterling-cve202139087-info-disc (216109)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T01:58:17.629Z"}}]}}}