CVEvulnerability
CVE-2020-4671
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-11-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-532
Description
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in log files that could be read by an authenticatedl user. IBM X-Force ID: 186284.
Affected configurations
• ibm sterling b2b integrator (>= 5.2.0.0 <= 5.2.6.5)
• ibm sterling b2b integrator (>= 6.0.0.0 <= 6.0.3.2)
Related
Weakness · CWE (1)
- CWE-532 Insertion of Sensitive Information into Log File weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/186284 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6368001 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/186284 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6368001 Patch, Vendor Advisory