Vulnerability Details : CVE-2020-4646
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an authenticated user to view pages they shoiuld not have access to due to improper authorization control.
Products affected by CVE-2020-4646
- IBM » Sterling B2b Integrator » Standard EditionVersions from including (>=) 6.0.0.0 and up to, including, (<=) 6.0.3.3cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:standard:*:*:*
- IBM » Sterling B2b Integrator » Standard EditionVersions from including (>=) 5.2.0.0 and up to, including, (<=) 5.2.6.5cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:standard:*:*:*
- IBM » Sterling B2b Integrator » Standard EditionVersions from including (>=) 6.1.0.0 and up to, including, (<=) 6.1.0.2cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:standard:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-4646
0.12%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 28 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-4646
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:N/A:N |
8.0
|
2.9
|
NIST | |
|
4.3
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
2.8
|
1.4
|
IBM Corporation | |
|
4.3
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
2.8
|
1.4
|
NIST |
References for CVE-2020-4646
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/185808
IBM Sterling B2B Integrator Standard Edition information disclosure CVE-2020-4646 Vulnerability ReportVDB Entry;Vendor Advisory
-
https://www.ibm.com/support/pages/node/6454169
Security Bulletin: Access Control Security Vulnerability Exists in Dashboard User Interface of IBM Sterling B2B Integrator (CVE-2020-4646)Patch;Vendor Advisory
Jump to