CVE-2020-4566 - IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive information in log files that could be read by an authenticated user

Back Back to CVE browser

MEDIUM

IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive information in log files that could be read by an authenticated user

Published Nov 16, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 1.04%

Description

IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive information in log files that could be read by an authenticated user. IBM X-Force ID: 184083.

Affected products

Vendor IBM Product Sterling B2B Integrator Default
n/a
- Version
  5.2.6.0
  Status
  affected
  Constraints
  -
- Version
  5.2.6.5
  Status
  affected
  Constraints
  -
- Version
  6.0.0.0
  Status
  affected
  Constraints
  -
- Version
  6.0.3.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

Sterling B2B Integrator

n/a

Version	Status	Constraints
5.2.6.0	affected	-
5.2.6.5	affected	-
6.0.0.0	affected	-
6.0.3.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25813
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/184083
vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6367975
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25813		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/184083		vdb-entryx_refsource_XFVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/6367975		x_refsource_CONFIRMPatchVendor Advisory