CVE-2019-4063

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in the middle techniques. IBM X-ForceID: 157008.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-319

Affected software

Vendor	Product	Versions
IBM	Sterling B2B Integrator	5.2.0.1; 6.0.0.0

References

http://www.securityfocus.com/bid/107310Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/157008VDB Entry, Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10874234Patch, Vendor Advisory
http://www.securityfocus.com/bid/107310Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/157008VDB Entry, Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10874234Patch, Vendor Advisory

Timeline

Published: Mar 5, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-40668.8IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 could allow an authenciated user to create arbitrary users which could cause ID CVE-2019-40677.5IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not require that users should have strong passwords by default, which makes CVE-2019-40687.5IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to user enumeration, allowing an attacker to brute force into the CVE-2019-40698.8IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not properly validate file types, allowing an attacker to upload malicious CVE-2019-40705.4IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed CVE-2019-40718.8IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute CVE-2019-40726.3IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the a CVE-2019-40735.4IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to e CVE-2019-40745.4IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to e CVE-2019-40755.4IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to e CVE-2019-40765.4IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to e CVE-2019-40775.4IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to e