CVE-2020-4668: CSRF
First published: Wed Apr 06 2022(Updated: )
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 186283.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Sterling B2B Integrator | >=6.0.0.0<=6.0.3.5 | |
| IBM Sterling B2B Integrator | >=6.1.0.0<=6.1.0.3 | |
| IBM Sterling B2B Integrator | =6.1.1.0 | |
| IBM AIX | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| <=6.0.0.0 - 6.0.3.5 | ||
| <=6.1.0.0 - 6.1.0.3, 6.1.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-4668.
What is the severity of CVE-2020-4668?
The severity of CVE-2020-4668 is high with a severity value of 8.8.
What is the affected software for CVE-2020-4668?
The affected software for CVE-2020-4668 is IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0.
How does the vulnerability in CVE-2020-4668 work?
The vulnerability in CVE-2020-4668 is a cross-site request forgery vulnerability which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
How can I fix the vulnerability in CVE-2020-4668?
To fix the vulnerability in CVE-2020-4668, apply the relevant patches provided by IBM for the affected versions of IBM Sterling B2B Integrator Standard Edition.
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/weakness
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm sterling b2b integrator
- version/ibm sterling b2b integrator/6.0.0.0
- version/ibm sterling b2b integrator/6.0.3.5
- version/ibm sterling b2b integrator/6.1.0.0
- version/ibm sterling b2b integrator/6.1.0.3
- version/ibm sterling b2b integrator/6.1.1.0
- canonical/ibm aix
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- version/ibm sterling b2b integrator/6.0.0.0 - 6.0.3.5
- version/ibm sterling b2b integrator/6.1.0.0 - 6.1.0.3, 6.1.1.0