CVE-2019-4728: Critical severity ibm b2b sterling integrator vulnerability
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.52, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code with SYSTEM privileges. IBM X-Force ID: 172452.
Other sources
IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code with SYSTEM privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4728?
CVE-2019-4728 has a critical severity rating due to the potential for remote code execution.
How do I fix CVE-2019-4728?
To fix CVE-2019-4728, upgrade the IBM Sterling B2B Integrator to the latest patched version as provided by IBM.
Which versions of IBM Sterling B2B Integrator are affected by CVE-2019-4728?
CVE-2019-4728 affects IBM Sterling B2B Integrator versions 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0.
Can CVE-2019-4728 be exploited remotely?
Yes, CVE-2019-4728 can be exploited remotely by an attacker sending specially crafted requests.
What type of vulnerability is CVE-2019-4728 classified as?
CVE-2019-4728 is classified as a deserialization vulnerability that allows arbitrary code execution.