Skip to content
OpenAdvisories
High · 8.8 CVE-2019-4728 EUVD-2019-14335GHSA-79pm-w7jm-jv2r

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker …

Published Jan 5, 2021 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code with SYSTEM privileges. IBM X-Force ID: 172452.

Affected products

VendorProductAffectedFixed
IBM Sterling B2B Integrator 6.0.0.0, 5.2.0.0, 6.0.3.2, 6.1.0.0, 5.2.6.5_2 —

References