CVE-2020-4646
First published: Sat May 15 2021(Updated: )
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an authenticated user to view pages they shoiuld not have access to due to improper authorization control.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM B2B Sterling Integrator | <=5.2.0.0 - 5.2.6.5_3 | |
| IBM B2B Sterling Integrator | <=6.0.0.0 - 6.0.3.3 | |
| IBM B2B Sterling Integrator | <=6.1.0.0 | |
| IBM B2B Sterling Integrator | >=5.2.0.0<=5.2.6.5 | |
| IBM B2B Sterling Integrator | >=6.0.0.0<=6.0.3.3 | |
| IBM B2B Sterling Integrator | >=6.1.0.0<=6.1.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-4646?
CVE-2020-4646 has been rated as a medium-severity vulnerability.
How do I fix CVE-2020-4646?
To fix CVE-2020-4646, apply the appropriate patches released by IBM for the affected versions of Sterling B2B Integrator.
What versions of IBM Sterling B2B Integrator are affected by CVE-2020-4646?
CVE-2020-4646 affects versions 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 of IBM Sterling B2B Integrator.
What is the impact of CVE-2020-4646?
The impact of CVE-2020-4646 allows authenticated users to view unauthorized pages due to improper authorization control.
Is CVE-2020-4646 exploitative in nature?
Yes, CVE-2020-4646 is considered to be potentially exploitative as it enables unauthorized access to restricted pages.
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/author
- agent/softwarecombine
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/tags
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ibm
- canonical/ibm b2b sterling integrator
- version/ibm b2b sterling integrator/5.2.0.0 - 5.2.6.5_3
- version/ibm b2b sterling integrator/6.0.0.0 - 6.0.3.3
- version/ibm b2b sterling integrator/6.1.0.0
- version/ibm b2b sterling integrator/5.2.0.0
- version/ibm b2b sterling integrator/5.2.6.5
- version/ibm b2b sterling integrator/6.0.0.0
- version/ibm b2b sterling integrator/6.0.3.3
- version/ibm b2b sterling integrator/6.1.0.2