CVE-2019-4595: Medium severity IBM Sterling B2B Integrator vulnerability
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 167878.
Other sources
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4595?
CVE-2019-4595 is classified as a high severity vulnerability due to the potential for remote attackers to exploit it for phishing attacks.
How do I fix CVE-2019-4595?
To fix CVE-2019-4595, install the latest patches available from IBM for the Sterling B2B Integrator version you are using.
Which versions of IBM Sterling B2B Integrator are affected by CVE-2019-4595?
CVE-2019-4595 affects IBM Sterling B2B Integrator versions 5.2.0.0 through 5.2.6.5.
What type of attack does CVE-2019-4595 enable?
CVE-2019-4595 enables remote attackers to conduct phishing attacks using an open redirect mechanism.
Can CVE-2019-4595 be exploited locally?
CVE-2019-4595 cannot be exploited locally since it requires a remote attacker to convince the victim to visit a specially-crafted website.