CVE-2019-4726: CSRF

Q: What is the severity of CVE-2019-4726?

The severity of CVE-2019-4726 is rated as 4.3 (Medium).

Q: How can I fix CVE-2019-4726?

You can patch the vulnerability by applying the remedy provided by IBM through this link: http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~Other%2Bsoftware&product=ibm/Other+software/Sterling+B2B+Integrator&release=All&platform=All&function=all

Published Feb 17, 2020

Updated

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 172363.

Other sources

IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected Software

2 affected componentsFixes available

IBM Sterling B2B Integrator<=5.2.0.0 - 6.0.3.0

IBM Sterling B2B Integrator>=5.2.0.0<=6.0.3.0

Remediation

Patch Available

https://www.ibm.com/support/pages/node/3145833

Event History

Feb 17, 2020

CVE Published

via IBM·12:00 AM

Feb 26, 2020

CVE Published

via MITRE·03:55 PM

Data Sourced

via MITRE·03:55 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-3145833

Frequently Asked Questions

What is the severity of CVE-2019-4726?