IBM Sterling B2B Integrator Standard Edition EBICS Server Information Disclosure Vulnerability

An information disclosure vulnerability has been identified in the EBICS server of IBM Sterling B2B Integrator Standard Edition, affecting versions 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3. This vulnerability could allow an authenticated user to access sensitive filename information due to an observable discrepancy.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive filename information.

Remediation

Users can upgrade to IBM Sterling B2B Integrator versions 6.1.2.6 or 6.2.0.4. The IIM versions of these releases are available on Fix Central, while the container versions can be found in the IBM Entitled Registry.