{"id":"CVE-2022-40232","state":"PUBLISHED","title":"IBM Sterling B2B Integrator Standard Edition improper access control","description":"\nIBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.\n\n","publishedAt":"2023-02-17T17:44:47.900Z","updatedAt":"2025-03-12T20:00:58.149Z","severity":{"score":6.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","source":"ibm"},"assigner":"ibm","products":["IBM Sterling B2B Integrator Standard Edition"],"affected":[{"vendor":"IBM","product":"Sterling B2B Integrator Standard Edition","defaultStatus":"unaffected","versions":[{"version":"6.1.0.0","status":"affected","lessThan":"6.1.1.1","versionType":"semver"},{"version":"6.1.2.0","status":"affected"}]}],"references":["https://www.ibm.com/support/pages/node/6954465","https://exchange.xforce.ibmcloud.com/vulnerabilities/235597"],"weaknesses":[],"ingestedAt":"2026-10-29T19:50:35.280Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/40xxx/CVE-2022-40232.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-40232","state":"PUBLISHED","datePublished":"2023-02-17T17:44:47.900Z","dateUpdated":"2025-03-12T20:00:58.149Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2022-09-08T15:59:19.269Z"},"containers":{"cna":{"title":"IBM Sterling B2B Integrator Standard Edition improper access control","descriptions":[{"lang":"en","value":"\nIBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.\n\n"}],"affected":[{"vendor":"IBM","product":"Sterling B2B Integrator Standard Edition","defaultStatus":"unaffected","versions":[{"version":"6.1.0.0","status":"affected","lessThan":"6.1.1.1","versionType":"semver"},{"version":"6.1.2.0","status":"affected"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/6954465","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/235597","tags":["vdb-entry"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"description":"284 Improper Access Control","lang":"en"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2023-02-17T17:44:47.900Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/6954465","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/235597","tags":["vdb-entry","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T12:14:40.016Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-03-12T20:00:46.857008Z","id":"CVE-2022-40232","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-12T20:00:58.149Z"}}]}}}