IBM Sterling B2B Integrator SQL Injection Vulnerability

A SQL injection vulnerability has been identified in IBM Sterling B2B Integrator versions 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1. This vulnerability allows remote attackers to send specially crafted SQL statements that could be used to view, add, modify, or delete information in the back-end database.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the database, allowing attackers to manipulate database information by adding, modifying, or deleting records.

Remediation

Users can upgrade to IBM Sterling B2B Integrator version 6.1.2.6 or 6.2.0.3. The IIM versions of 6.1.2.6 and 6.2.0.3 are available on Fix Central. The container version of 6.1.2.6 and 6.2.0.3 are available in the IBM Entitled Registry.