PT-2019-16874 · Ibm · Ibm Sterling B2B Integrator
CVE-2019-4063
·
Publicado
2019-03-05
·
Atualizado
2023-02-03
CVSS v3.1
5.9
Média
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Sterling B2B Integrator versions 5.2.0.1 through 6.0.0.0 Standard Edition
Description
The issue allows highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man-in-the-middle techniques.
Recommendations
For versions 5.2.0.1 through 6.0.0.0 Standard Edition, consider implementing encryption to protect sensitive information transmitted by the IBM Sterling B2B Integrator. As a temporary workaround, restrict access to sensitive data until a proper fix is applied.
Correção
Cleartext Transmission of Sensitive Information
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Sterling B2B Integrator