CVE-2019-4738
First published: Wed Jul 22 2020(Updated: )
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM B2B Sterling Integrator | <=6.0.0.0 - 6.0.3.1 | |
| IBM Sterling B2B Integrator | <=5.2.0.0 - 5.2.6.5_1 | |
| IBM B2B Sterling Integrator | >=5.2.0.0<=5.2.6.5 | |
| IBM B2B Sterling Integrator | >=6.0.0.0<=6.0.3.1 | |
| HPE HP-UX | ||
| IBM AIX | ||
| IBM i | ||
| Linux Kernel | ||
| Microsoft Windows | ||
| Oracle Solaris SPARC |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-4738?
CVE-2019-4738 is classified as a moderate severity vulnerability.
How do I fix CVE-2019-4738?
To fix CVE-2019-4738, apply the latest patches provided by IBM for the affected versions.
What versions of IBM Sterling B2B Integrator are affected by CVE-2019-4738?
CVE-2019-4738 affects IBM Sterling B2B Integrator versions 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1.
What type of information does CVE-2019-4738 disclose?
CVE-2019-4738 discloses sensitive information to authenticated users via the dashboard UI.
Can CVE-2019-4738 be exploited for further attacks?
Yes, the information disclosed by CVE-2019-4738 could potentially be used in further attacks against the system.
- agent/references
- agent/first-publish-date
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/author
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ibm
- canonical/ibm b2b sterling integrator
- version/ibm b2b sterling integrator/6.0.0.0 - 6.0.3.1
- canonical/ibm sterling b2b integrator
- version/ibm sterling b2b integrator/5.2.0.0 - 5.2.6.5_1
- version/ibm b2b sterling integrator/5.2.0.0
- version/ibm b2b sterling integrator/5.2.6.5
- version/ibm b2b sterling integrator/6.0.0.0
- version/ibm b2b sterling integrator/6.0.3.1
- vendor/hp
- canonical/hpe hp-ux
- canonical/ibm aix
- canonical/ibm i
- vendor/linux
- canonical/linux kernel
- vendor/microsoft
- canonical/microsoft windows
- vendor/oracle
- canonical/oracle solaris sparc