PT-2019-16874 · Ibm · Ibm Sterling B2B Integrator

Published 2019-03-05 · Updated 2023-02-03 · CVE-2019-4063

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 5.2.0.1 through 6.0.0.0 Standard Edition

Description The issue allows highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man-in-the-middle techniques.

Recommendations For versions 5.2.0.1 through 6.0.0.0 Standard Edition, consider implementing encryption to protect sensitive information transmitted by the IBM Sterling B2B Integrator. As a temporary workaround, restrict access to sensitive data until a proper fix is applied.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2019-4063

Affected Products

Ibm Sterling B2B Integrator

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-4063 · Security Note
• https://osv.dev/vulnerability/CVE-2019-4063 · Vendor Advisory
• https://ibm.com/support/docview.wss?uid=ibm10874234 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/157008 · Vendor Advisory
• http://securityfocus.com/bid/107310 · Note