Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-4063

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in the middle techniques. IBM X-ForceID: 157008.

Published

2019-03-05T18:29:00.807

Last Modified

2024-11-21T04:43:06.667

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.9 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
CWE-319

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ibm	sterling_b2b_integrator	≤ 6.0.0.0	Yes

References

http://www.securityfocus.com/bid/107310 Third Party Advisory, VDB Entry ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/157008 VDB Entry, Vendor Advisory ([email protected])
https://www.ibm.com/support/docview.wss?uid=ibm10874234 Patch, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/107310 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/157008 VDB Entry, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.ibm.com/support/docview.wss?uid=ibm10874234 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)