{"id":"CVE-2019-4063","state":"PUBLISHED","title":"IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this informa","description":"IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in the middle techniques. IBM X-ForceID: 157008.","publishedAt":"2019-03-05T18:00:00.000Z","updatedAt":"2024-09-17T04:18:59.985Z","severity":{"score":5.9,"label":"Medium","version":"3.0","vector":"CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O","source":"ibm"},"assigner":"ibm","products":["IBM Sterling B2B Integrator"],"affected":[{"vendor":"IBM","product":"Sterling B2B Integrator","versions":[{"version":"5.2.0.1","status":"affected"},{"version":"6.0.0.0","status":"affected"}]}],"references":["https://exchange.xforce.ibmcloud.com/vulnerabilities/157008","http://www.securityfocus.com/bid/107310","https://www.ibm.com/support/docview.wss?uid=ibm10874234"],"weaknesses":[],"ingestedAt":"2026-10-29T19:46:01.452Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/4xxx/CVE-2019-4063.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-4063","state":"PUBLISHED","datePublished":"2019-03-05T18:00:00.000Z","dateUpdated":"2024-09-17T04:18:59.985Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2019-01-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in the middle techniques. IBM X-ForceID: 157008."}],"affected":[{"vendor":"IBM","product":"Sterling B2B Integrator","versions":[{"version":"5.2.0.1","status":"affected"},{"version":"6.0.0.0","status":"affected"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/157008","name":"ibm-sterling-cve20194063-info-disc(157008)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.securityfocus.com/bid/107310","name":"107310","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://www.ibm.com/support/docview.wss?uid=ibm10874234","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","exploitCodeMaturity":"UNPROVEN","integrityImpact":"NONE","privilegesRequired":"NONE","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":5.2,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.0/A:N/AC:H/AV:N/C:H/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2019-03-08T10:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2019-02-28T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2019-02-28T00:00:00","ID":"CVE-2019-4063","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Sterling B2B Integrator","version":{"version_data":[{"version_value":"5.2.0.1"},{"version_value":"6.0.0.0"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in the middle techniques. IBM X-ForceID: 157008."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"H","AV":"N","C":"H","I":"N","PR":"N","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"ibm-sterling-cve20194063-info-disc(157008)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/157008"},{"name":"107310","refsource":"BID","url":"http://www.securityfocus.com/bid/107310"},{"name":"https://www.ibm.com/support/docview.wss?uid=ibm10874234","refsource":"CONFIRM","url":"https://www.ibm.com/support/docview.wss?uid=ibm10874234"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/157008","name":"ibm-sterling-cve20194063-info-disc(157008)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/107310","name":"107310","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://www.ibm.com/support/docview.wss?uid=ibm10874234","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T19:26:27.905Z"}}]}}}