IBM Sterling B2B Integrator Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	108110
Class:	Design Error
CVE:	CVE-2019-4146 CVE-2019-4222
Remote:	Yes
Local:	No
Published:	Apr 19 2019 12:00AM
Updated:	Apr 19 2019 12:00AM
Credit:	IBM
Vulnerable:	IBM Sterling B2B Integrator 6.0.0.1 IBM Sterling B2B Integrator 6.0.0.0
Not Vulnerable:	IBM Sterling B2B Integrator 6.0.1.0

IBM Sterling B2B Integrator Multiple Information Disclosure Vulnerabilities

IBM Sterling B2B Integrator is prone to multiple information-disclosure vulnerabilities.

An attacker can exploit these issues to gain access to sensitive information. Information obtained may aid in other attacks.

IBM Sterling B2B Integrator version 6.0.0.0 through 6.0.0.1 are vulnerable.

IBM Sterling B2B Integrator Multiple Information Disclosure Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Sterling B2B Integrator Multiple Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Sterling B2B Integrator Multiple Information Disclosure Vulnerabilities

References:

• IBM Homepage (IBM)
  
• Security Bulletin: Information Disclosure Vulnerabilities Affect IBM Sterling B2 (IBM)