CVE-2013-0479 — IBM Sterling B2B Integrator vulnerability

CWE-2643 documents3 sources
Severity
4.0MEDIUMNVD
EPSS
0.1%
top 68.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Sterling B2B IntegratorIBM Sterling File Gateway
Timeline
PublishedJul 3
Latest updateMay 5

Description

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-j7v4-3qj6-2c4j: IBM Sterling B2B Integrator 5↗2022-05-05
▶
CVEList
CVE-2013-0479: IBM Sterling B2B Integrator 5↗2013-07-03
▶
CVE-2013-0479 — IBM vulnerability | cvebase