CVE-2020-4692

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/186780
• https://www.ibm.com/support/pages/node/6368009 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6368009

Frequently Asked Questions

• What is CVE-2020-4692?

  CVE-2020-4692 is a vulnerability in IBM Sterling B2B Integrator that allows an authenticated user to obtain sensitive information from the Dashboard UI.

• What is the severity of CVE-2020-4692?

  CVE-2020-4692 has a severity keyword of medium and a severity value of 6.5.

• Which versions of IBM Sterling B2B Integrator are affected by CVE-2020-4692?

  IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 are affected by CVE-2020-4692.

• How can an authenticated user exploit CVE-2020-4692?

  An authenticated user can exploit CVE-2020-4692 to obtain sensitive information from the Dashboard UI.

• Is there a patch available for CVE-2020-4692?

  Yes, a patch is available for IBM Sterling B2B Integrator to fix CVE-2020-4692. You can find the patch at the following URL: [Patch URL](http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~Other%2Bsoftware&product=ibm/Other+software/Sterling+B2B+Integrator&release=All&platform=All&function=all)