Lucene search
HistoryJul 03, 2013 - 1:54 p.m.
CVE-2013-0479
ibm
sterling b2b integrator
sterling file gateway
cve-2013-0479
nvd
file type restriction
6.2 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
29.8%
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename.
Related
prion
prion
Design/Logic Flaw
2013-07-03 13:54:00
cvelist
cvelist
CVE-2013-0479
2013-07-03 10:00:00
ibm
ibm
6.2 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
29.8%
Related for CVE-2013-0479