IBM Sterling B2B Integrator Standard Edition CVE-2019-4258 Cross Site Scripting Vulnerability

Bugtraq ID:	108188
Class:	Input Validation Error
CVE:	CVE-2019-4258
Remote:	Yes
Local:	No
Published:	Apr 29 2019 12:00AM
Updated:	Apr 29 2019 12:00AM
Credit:	IBM
Vulnerable:	IBM Sterling B2B Integrator 6.0.0.1 IBM Sterling B2B Integrator 6.0.0.0
Not Vulnerable:	IBM Sterling B2B Integrator 6.0.1.0

IBM Sterling B2B Integrator Standard Edition CVE-2019-4258 Cross Site Scripting Vulnerability

IBM Sterling B2B Integrator is prone to a cross-site scripting vulnerability.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

IBM Sterling B2B Integrator versions 6.0.0.0 through 6.0.0.1 are vulnerable.

IBM Sterling B2B Integrator Standard Edition CVE-2019-4258 Cross Site Scripting Vulnerability

To exploit this issue an attacker must entice an unsuspecting victim to follow a malicious URI.

IBM Sterling B2B Integrator Standard Edition CVE-2019-4258 Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Sterling B2B Integrator Standard Edition CVE-2019-4258 Cross Site Scripting Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: Multiple Cross-Site Scripting Vulnerabilities Affect IBM Ste (IBM)