IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename.
References
Link | Resource |
---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg21640830 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/81547 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-07-03 06:54
Updated : 2017-08-28 18:33
NVD link : CVE-2013-0479
Mitre link : CVE-2013-0479
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
ibm
- sterling_file_gateway
- sterling_b2b_integrator