{"id":"CVE-2021-29700","aliases":["EUVD-2021-16174","GHSA-962f-hmm4-wj65"],"status":"published","title":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated...","description":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/I:N/PR:L/AC:L/C:L/S:U/UI:N/A:N/E:U/RC:C/RL:O","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00892,"percentile":0.59728,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2021-10-07T18:06:00Z","modified":"2026-06-17T03:48:10Z","products":[{"vendor":"ibm","product":"sterling b2b integrator"},{"vendor":"ibm","product":"sterling_b2b_integrator"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6496749","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/200656","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29700"},{"url":"https://github.com/advisories/GHSA-962f-hmm4-wj65"}],"sources":{"cve":[{"id":"CVE-2021-29700","description":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656.","status":"published","published":"2021-10-07T18:06:00.287Z","modified":"2024-09-17T00:05:44.532Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/I:N/PR:L/AC:L/C:L/S:U/UI:N/A:N/E:U/RC:C/RL:O","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:06.658806Z"}],"euvd":[{"id":"EUVD-2021-16174","description":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656.","status":"published","published":"2021-10-07T18:06:00Z","modified":"2024-09-17T00:05:44Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/I:N/PR:L/AC:L/C:L/S:U/UI:N/A:N/E:U/RC:C/RL:O","level":"medium"}],"updated_at":"2026-11-03T00:29:02.472621Z"}],"ghsa":[{"id":"GHSA-962f-hmm4-wj65","title":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated...","description":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656.","status":"published","published":"2022-05-24T19:16:52Z","modified":"2023-01-27T05:03:37Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:42:17.140708Z"}],"nvd":[{"id":"CVE-2021-29700","description":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656.","status":"published","published":"2021-10-07T18:15:08.437Z","modified":"2026-06-17T03:48:10.117Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:59.689345Z"}]}}