QID 375954

QID 375954: IBM Sterling B2B Integrator Access Control Security Vulnerability

IBM Sterling B2B Integrator helps companies integrate all their complex B2B/EDI processes across their partner communities in a single gateway. IBM Sterling B2B Integrator Standard Edition could allow a local user to obtain sensitive information via Queue Watcher.

Affected Versions:
IBM Sterling B2B Integrator 5.2.0.0 - 5.2.6.5_3
IBM Sterling B2B Integrator 6.0.0.0 - 6.0.3.3
IBM Sterling B2B Integrator 6.1.0.0

QID Detection Logic:(Authenticated)
This QID checks the vulnerable version of IBM B2B installed

It could allow an authenticated user to view pages they should not have access to due to improper authorization control.

CVSS V3 rated as Medium - 4.3 severity.

CVSS V2 rated as Medium - 4 severity.

Solution

Customers are advised to apply B2B Integrator version 5.2.6.5_4 or 6.0.3.4 or 6.1.0.1 to fix this vulnerability. More information can be found CVE-2020-4646.

Vendor References

CVE-2020-4646 - www.ibm.com/support/pages/node/6454169

CVEs related to QID 375954

CVE-2020-4646 |

Software Advisories

Advisory ID	Software	Component	Link
CVE-2020-4646			www.ibm.com/support/pages/node/6454169

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].