Lucene search

[email protected]CVE-2013-5407

HistoryDec 21, 2013 - 2:22 p.m.

CVE-2013-5407

2013-12-2114:22:00

CWE-20

[email protected]

web.nvd.nist.gov

ibm

sterling b2b integrator

sterling file gateway

cve-2013-5407

authenticated users

access restrictions

web site

frame injection

5.8 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

39.3%

JSON

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information via a crafted web site, related to a “frame injection” issue.

CPENameOperatorVersion
ibm:sterling_b2b_integratoribm sterling b2b integratoreq5.2
ibm:sterling_file_gatewayibm sterling file gatewayeq2.2

CPE	Name	Operator	Version
ibm:sterling_b2b_integrator	ibm sterling b2b integrator	eq	5.2
ibm:sterling_file_gateway	ibm sterling file gateway	eq	2.2

References

www-01.ibm.com/support/docview.wss?uid=swg1IC96057

www-01.ibm.com/support/docview.wss?uid=swg21657539

exchange.xforce.ibmcloud.com/vulnerabilities/87356

5.8 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

39.3%

JSON

Related for CVE-2013-5407

cvelist1 prion1 ibm1