CVE-2020-4671: Medium severity IBM Sterling B2B Integrator vulnerability
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an authenticatedl user. IBM X-Force ID: 186284.
Other sources
IBM Sterling B2B Integrator Standard Edition stores potentially sensitive information in log files that could be read by an authenticatedl user.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4671?
CVE-2020-4671 is considered to have a medium severity due to the exposure of potentially sensitive information in log files.
How do I fix CVE-2020-4671?
To fix CVE-2020-4671, update IBM Sterling B2B Integrator to version 6.0.3.3 or later, or 5.2.6.6 or later.
What versions of IBM Sterling B2B Integrator are affected by CVE-2020-4671?
Versions 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 of IBM Sterling B2B Integrator are affected by CVE-2020-4671.
Who is impacted by CVE-2020-4671?
Authenticated users of IBM Sterling B2B Integrator may be impacted by CVE-2020-4671 as they can read sensitive information from log files.
What are the potential consequences of CVE-2020-4671?
The potential consequences of CVE-2020-4671 include unauthorized access to sensitive information stored in log files, which could lead to data breaches.