CVE-2023-42016

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Feb 9, 2024
Updated: Feb 15, 2024
CWE ID 614
CWE ID 319

Summary

CVE-2023-42016 is a vulnerability affecting IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3, where authorization tokens or session cookies are not set with the secure attribute. This vulnerability allows attackers to obtain cookie values by sending a malicious link to a user or planting it on a website the user visits, enabling them to snoop the traffic and retrieve the cookie information. The risk score is 5, indicating a medium severity level, with low confidentiality impact and no integrity impact or availability impact identified. No remediation steps are provided in the source text, and there is no analysis description available for this vulnerability at this time.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-42016 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options