CVE-2017-1326 — Improper Privilege Management in IBM Sterling B2B Integrator

CWE-269 — Improper Privilege Management3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.1%
top 65.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Sterling B2B Integrator
Timeline
PublishedJun 22
Latest updateMay 13

Description

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/sterling_b2b_integrator7 versions+6

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-2m6x-j88f-83rx: IBM Sterling File Gateway does not properly restrict user requests based on permission level↗2022-05-13
▶
CVEList
CVE-2017-1326: IBM Sterling File Gateway does not properly restrict user requests based on permission level↗2017-06-22
▶
CVE-2017-1326 — Improper Privilege Management in IBM | cvebase