CVE-2012-5936 — IBM Sterling B2B Integrator vulnerability

CWE-3103 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.3%
top 48.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Sterling B2B IntegratorIBM Sterling File Gateway
Timeline
PublishedJul 3
Latest updateMay 17

Description

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-6fhf-vjwm-h7w6: IBM Sterling B2B Integrator 5↗2022-05-17
▶
CVEList
CVE-2012-5936: IBM Sterling B2B Integrator 5↗2013-07-03
▶
CVE-2012-5936 — IBM vulnerability | cvebase