ASA-2019-00246 – IBM Sterling B2B Integrator Standard Edition: Multiple Cross-Site Scripting (XSS) Vulnerabilities


Allele Security Alert

ASA-2019-00246

Identifier(s)

ASA-2019-00246, CVE-2019-4076

Title

Multiple Cross-Site Scripting (XSS) Vulnerabilities

Vendor(s)

IBM

Product(s)

IBM Sterling B2B Integrator Standard Edition

Affected version(s)

IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1

Fixed version(s)

IBM Sterling B2B Integrator version 6.0.1.0

Proof of concept

Unknown

Description

IBM Sterling B2B Integrator Standard Edition is vulnerable to Cross-Site Scripting (XSS). This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Technical details

Unknown

Credits

Unknown

Reference(s)

Security Bulletin: Multiple Cross-Site Scripting Vulnerabilities Affect IBM Sterling B2B Integrator
https://www-01.ibm.com/support/docview.wss?uid=ibm10880591

IBM Sterling B2B Integrator cross-site scripting
https://exchange.xforce.ibmcloud.com/vulnerabilities/157110

CVE-2019-4076
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-4076

CVE-2019-4076
https://nvd.nist.gov/vuln/detail/CVE-2019-4076

If there is any error in this alert or you wish a comprehensive analysis, let us know.

Last modified: November 22, 2019

We are not responsible for any data loss, device corruption or any other type of issue due to the use of any information mentioned in our security alerts.