PT-2019-17047 · Ibm · Ibm Sterling B2B Integrator

Published 2019-06-25 · Updated 2023-01-30 · CVE-2019-4377

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 6.0.0.0 through 6.0.0.1

Description The issue reveals sensitive information from a stack trace, which could be used in further attacks against the system.

Recommendations For versions 6.0.0.0 and 6.0.0.1, consider implementing measures to restrict access to stack trace information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

CVE-2019-4377

Affected Products

Ibm Sterling B2B Integrator

References · 5

• https://ibm.com/support/docview.wss?uid=ibm10887853 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4377 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/162083 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4377 · Security Note
• http://securityfocus.com/bid/108915 · Note