CVE-2019-4738
4.3
CVSS:3.0/C:L/UI:N/S:U/AV:N/I:N/AC:L/A:N/PR:L/RC:C/RL:O/E:U
Summary
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Sterling B2B Integrator | 6.0.0.0 | affected |
| IBM | Sterling B2B Integrator | 5.2.0.0 | affected |
| IBM | Sterling B2B Integrator | 5.2.6.5 | affected |
| IBM | Sterling B2B Integrator | 6.0.3.1 | affected |
Weaknesses
- Obtain Information
ADP Enrichment
CVE Program Container
Additional References
- https://www.ibm.com/support/pages/node/6380390
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172753
References
- https://www.ibm.com/support/pages/node/6380390
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172753
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.