CVE-2019-4728
First published: Mon Jan 04 2021(Updated: )
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code with SYSTEM privileges. IBM X-Force ID: 172452.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Sterling B2B Integrator | >=5.2.0.0<=5.2.6.5_2 | |
| IBM Sterling B2B Integrator | >=6.0.0.0<=6.0.3.2 | |
| IBM Sterling B2B Integrator | =6.1.0.0 | |
| HP HP-UX | ||
| IBM AIX | ||
| IBM i | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Oracle Solaris | ||
| <=5.2.0.0 - 5.2.6.5_2 | ||
| <=6.0.0.0 - 6.0.3.2 | ||
| <=6.1.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/severity
- agent/last-modified-date
- agent/description
- agent/softwarecombine
- agent/tags
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm sterling b2b integrator
- version/ibm sterling b2b integrator/5.2.0.0
- version/ibm sterling b2b integrator/5.2.6.5_2
- version/ibm sterling b2b integrator/6.0.0.0
- version/ibm sterling b2b integrator/6.0.3.2
- version/ibm sterling b2b integrator/6.1.0.0
- vendor/hp
- canonical/hp hp-ux
- canonical/ibm aix
- canonical/ibm i
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- vendor/oracle
- canonical/oracle solaris
- version/ibm sterling b2b integrator/5.2.0.0 - 5.2.6.5_2
- version/ibm sterling b2b integrator/6.0.0.0 - 6.0.3.2