CVE-2015-7410

The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.

Score

CVSS 3.0 7.4 High

Status

Modified - psirt@us.ibm.com

Published

2016-01-01

Last modified

2024-08-06

Weaknesses

CWE-17

Affected products

• Sterling B2b Integrator (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21972676
• http://www.securityfocus.com/bid/79685