{"api_version":"1","generated_at":"2026-07-24T21:29:03+00:00","cve":"CVE-2021-29700","urls":{"html":"https://cve.report/CVE-2021-29700","api":"https://cve.report/api/cve/CVE-2021-29700.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2021-29700","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-29700"},"summary":{"title":"CVE-2021-29700","description":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656.","state":"PUBLIC","assigner":"psirt@us.ibm.com","published_at":"2021-10-07 18:15:00","updated_at":"2022-06-28 14:11:00"},"problem_types":["NVD-CWE-noinfo"],"metrics":[],"references":[{"url":"https://www.ibm.com/support/pages/node/6496749","name":"https://www.ibm.com/support/pages/node/6496749","refsource":"CONFIRM","tags":[],"title":"Security Bulletin: Informaton Disclosure Vulnerability Affects the Dashboard User Interface of IBM Stelring B2B Integrator (CVE-2021-29700)","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/200656","name":"ibm-sterling-cve202129700-info-disc (200656)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29700","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29700","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2021","cve_id":"29700","vulnerable":"1","versionEndIncluding":"5.2.6.5_4","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"sterling_b2b_integrator","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"29700","vulnerable":"1","versionEndIncluding":"6.0.0.6","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"sterling_b2b_integrator","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"29700","vulnerable":"1","versionEndIncluding":"6.0.3.4","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"sterling_b2b_integrator","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"29700","vulnerable":"1","versionEndIncluding":"6.1.0.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"sterling_b2b_integrator","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"description":{"description_data":[{"value":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656.","lang":"eng"}]},"problemtype":{"problemtype_data":[{"description":[{"value":"Obtain Information","lang":"eng"}]}]},"data_format":"MITRE","references":{"reference_data":[{"url":"https://www.ibm.com/support/pages/node/6496749","title":"IBM Security Bulletin 6496749 (Sterling B2B Integrator)","name":"https://www.ibm.com/support/pages/node/6496749","refsource":"CONFIRM"},{"title":"X-Force Vulnerability Report","name":"ibm-sterling-cve202129700-info-disc (200656)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/200656"}]},"impact":{"cvssv3":{"TM":{"E":"U","RC":"C","RL":"O"},"BM":{"AV":"N","I":"N","PR":"L","SCORE":"4.300","AC":"L","C":"L","S":"U","UI":"N","A":"N"}}},"data_version":"4.0","data_type":"CVE","CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2021-10-06T00:00:00","ID":"CVE-2021-29700","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"vendor_name":"IBM","product":{"product_data":[{"product_name":"Sterling B2B Integrator","version":{"version_data":[{"version_value":"6.0.0.0"},{"version_value":"5.2.0.0"},{"version_value":"6.0.1.0"},{"version_value":"6.1.0.0"},{"version_value":"6.1.0.2"},{"version_value":"6.0.3.4"},{"version_value":"5.2.6.5_4"},{"version_value":"6.0.0.6"}]}}]}}]}}},"nvd":{"publishedDate":"2021-10-07 18:15:00","lastModifiedDate":"2022-06-28 14:11:00","problem_types":["NVD-CWE-noinfo"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":1.4},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4},"severity":"MEDIUM","exploitabilityScore":8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.1.0","versionEndIncluding":"6.0.3.4","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0.0","versionEndIncluding":"6.0.0.6","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0.0","versionEndIncluding":"5.2.6.5_4","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.0.0","versionEndIncluding":"6.1.0.2","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2021","CveId":"29700","Ordinal":"204930","Title":"CVE-2021-29700","CVE":"CVE-2021-29700","Year":"2021"},"notes":[{"CveYear":"2021","CveId":"29700","Ordinal":"1","NoteData":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authneticated attacker to obtain sensitive information from configuration files that could aid in further attacks against the system. IBM X-Force ID: 200656.","Type":"Description","Title":null},{"CveYear":"2021","CveId":"29700","Ordinal":"2","NoteData":"2021-10-07","Type":"Other","Title":"Published"},{"CveYear":"2021","CveId":"29700","Ordinal":"3","NoteData":"2021-10-07","Type":"Other","Title":"Modified"}]}}}