Lucene search

IbmCVELIST:CVE-2019-4063

HistoryMar 05, 2019 - 6:00 p.m.

CVE-2019-4063

2019-03-0518:00:00

ibm

www.cve.org

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

44.2%

JSON

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in the middle techniques. IBM X-ForceID: 157008.

CNA Affected

[
  {
    "product": "Sterling B2B Integrator",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "5.2.0.1"
      },
      {
        "status": "affected",
        "version": "6.0.0.0"
      }
    ]
  }
]

References

www.securityfocus.com/bid/107310

exchange.xforce.ibmcloud.com/vulnerabilities/157008

www.ibm.com/support/docview.wss?uid=ibm10874234

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

44.2%

JSON

Related for CVELIST:CVE-2019-4063