CVE-2013-5407

published 2013-12-21

CVE-2013-5407: IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass…

medium 4.9 CVSS 3.1

AV N AC M Au S C P I P A N

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information via a crafted web site, related to a "frame injection" issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	sterling_b2b_integrator	—	—
ibm	sterling_file_gateway	—	—

CWE-20