{"api_version":"1","generated_at":"2026-07-23T11:50:38+00:00","cve":"CVE-2020-4646","urls":{"html":"https://cve.report/CVE-2020-4646","api":"https://cve.report/api/cve/CVE-2020-4646.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-4646","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-4646"},"summary":{"title":"CVE-2020-4646","description":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an authenticated user to view pages they shoiuld not have access to due to improper authorization control.","state":"PUBLIC","assigner":"psirt@us.ibm.com","published_at":"2021-05-19 20:15:00","updated_at":"2022-05-03 16:04:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/185808","name":"ibm-sterling-cve20204646-info-disc (185808)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.ibm.com/support/pages/node/6454169","name":"https://www.ibm.com/support/pages/node/6454169","refsource":"CONFIRM","tags":[],"title":"Security Bulletin: Access Control Security Vulnerability Exists in Dashboard User Interface of IBM Sterling B2B Integrator (CVE-2020-4646)","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-4646","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-4646","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"4646","vulnerable":"1","versionEndIncluding":"5.2.6.5","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"sterling_b2b_integrator","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"standard","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4646","vulnerable":"1","versionEndIncluding":"6.0.3.3","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"sterling_b2b_integrator","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"standard","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"4646","vulnerable":"1","versionEndIncluding":"6.1.0.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"sterling_b2b_integrator","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"standard","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2020-4646","qid":"375954","title":"IBM Sterling B2B Integrator Access Control Security Vulnerability"}]},"source_records":{"cve_program":{"problemtype":{"problemtype_data":[{"description":[{"value":"Obtain Information","lang":"eng"}]}]},"data_type":"CVE","affects":{"vendor":{"vendor_data":[{"vendor_name":"IBM","product":{"product_data":[{"version":{"version_data":[{"version_value":"6.0.0.0"},{"version_value":"5.2.0.0"},{"version_value":"5.2.6.5"},{"version_value":"6.1.0.0"},{"version_value":"6.0.3.3"},{"version_value":"6.1.0.2"}]},"product_name":"Sterling B2B Integrator"}]}}]}},"impact":{"cvssv3":{"TM":{"RC":"C","E":"U","RL":"O"},"BM":{"I":"N","AV":"N","UI":"N","S":"U","SCORE":"4.300","C":"L","PR":"L","AC":"L","A":"N"}}},"data_format":"MITRE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an authenticated user to view pages they shoiuld not have access to due to improper authorization control."}]},"CVE_data_meta":{"DATE_PUBLIC":"2021-05-18T00:00:00","ID":"CVE-2020-4646","ASSIGNER":"psirt@us.ibm.com","STATE":"PUBLIC"},"references":{"reference_data":[{"refsource":"CONFIRM","name":"https://www.ibm.com/support/pages/node/6454169","title":"IBM Security Bulletin 6454169 (Sterling B2B Integrator)","url":"https://www.ibm.com/support/pages/node/6454169"},{"title":"X-Force Vulnerability Report","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/185808","refsource":"XF","name":"ibm-sterling-cve20204646-info-disc (185808)"}]}},"nvd":{"publishedDate":"2021-05-19 20:15:00","lastModifiedDate":"2022-05-03 16:04:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":1.4},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4},"severity":"MEDIUM","exploitabilityScore":8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:standard:*:*:*","versionStartIncluding":"5.2.0.0","versionEndIncluding":"5.2.6.5","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:standard:*:*:*","versionStartIncluding":"6.1.0.0","versionEndIncluding":"6.1.0.2","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:standard:*:*:*","versionStartIncluding":"6.0.0.0","versionEndIncluding":"6.0.3.3","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"4646","Ordinal":"164674","Title":"CVE-2020-4646","CVE":"CVE-2020-4646","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"4646","Ordinal":"1","NoteData":"IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an authenticated user to view pages they shoiuld not have access to due to improper authorization control.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"4646","Ordinal":"2","NoteData":"2021-05-19","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"4646","Ordinal":"3","NoteData":"2021-05-19","Type":"Other","Title":"Modified"}]}}}