Lucene search
HistoryJul 03, 2013 - 1:54 p.m.
CVE-2013-0539
ibm
sterling b2b integrator
session hijacking
vulnerability
nvd
cve-2013-0539
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.1%
An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive information, via a brute-force attack.
Affected configurations
Node
ibmsterling_b2b_integratorMatch5.1
ORibmsterling_b2b_integratorMatch5.2
ORibmsterling_file_gatewayMatch2.1
ORibmsterling_file_gatewayMatch2.2
Related
cvelist
cvelist
CVE-2013-0539
2013-07-03 10:00:00
nvd
nvd
CVE-2013-0539
2013-07-03 13:54:31
prion
prion
Information disclosure
2013-07-03 13:54:00
ibm
ibm
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.1%
Related for CVE-2013-0539