CVE-2013-2982

2013-07-0313:54:31

[email protected]

web.nvd.nist.gov

ibm

sterling

b2b integrator

file gateway

remote

authenticated

file upload

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.4%

JSON

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to upload arbitrary files via unspecified vectors.

Affected configurations

NVD

Node

ibmsterling_b2b_integratorMatch5.1

ibmsterling_b2b_integratorMatch5.2

ibmsterling_file_gatewayMatch2.1

ibmsterling_file_gatewayMatch2.2

CPENameOperatorVersion
ibm:sterling_b2b_integratoribm sterling b2b integratoreq5.1
ibm:sterling_b2b_integratoribm sterling b2b integratoreq5.2
ibm:sterling_file_gatewayibm sterling file gatewayeq2.1
ibm:sterling_file_gatewayibm sterling file gatewayeq2.2

CPE	Name	Operator	Version
ibm:sterling_b2b_integrator	ibm sterling b2b integrator	eq	5.1
ibm:sterling_b2b_integrator	ibm sterling b2b integrator	eq	5.2
ibm:sterling_file_gateway	ibm sterling file gateway	eq	2.1
ibm:sterling_file_gateway	ibm sterling file gateway	eq	2.2