{"id":"CVE-2022-40232","aliases":["EUVD-2022-43530","GHSA-qcpf-p3gc-mx83"],"status":"published","title":"IBM Sterling B2B Integrator Standard Edition improper access control","description":"IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00455,"percentile":0.39965,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276"],"published":"2023-02-17T17:44:47Z","modified":"2026-06-17T05:01:09Z","products":[{"vendor":"ibm","product":"sterling b2b integrator standard edition"},{"vendor":"ibm","product":"sterling_b2b_integrator"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6954465","tags":["vendor-advisory","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/235597","tags":["vdb-entry","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40232"},{"url":"https://github.com/advisories/GHSA-qcpf-p3gc-mx83"}],"sources":{"cve":[{"id":"CVE-2022-40232","title":"IBM Sterling B2B Integrator Standard Edition improper access control","description":"\nIBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.\n\n","status":"published","published":"2023-02-17T17:44:47.9Z","modified":"2025-03-12T20:00:58.149Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:34:30.493103Z"}],"euvd":[{"id":"EUVD-2022-43530","description":"\nIBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.\n\n","status":"published","published":"2023-02-17T17:44:47Z","modified":"2025-03-12T20:00:58Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T20:53:05.95539Z"}],"ghsa":[{"id":"GHSA-qcpf-p3gc-mx83","title":"IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an...","description":"IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.","status":"published","published":"2023-02-17T18:30:23Z","modified":"2023-03-09T05:06:34Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:54:17.697698Z"}],"nvd":[{"id":"CVE-2022-40232","description":"\nIBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.\n\n","status":"published","published":"2023-02-17T18:15:11.833Z","modified":"2026-06-17T05:01:09.62Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:07:36.601381Z"}]}}