Design/Logic Flaw

2018-07-2016:29:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) caches usernames and passwords in browsers that could be used by a local attacker to obtain sensitive information. IBM X-Force ID: 130812.

CPENameOperatorVersion
sterling_file_gatewayge2.2.0
sterling_file_gatewayle2.2.6

CPE	Name	Operator	Version
	sterling_file_gateway	ge	2.2.0
	sterling_file_gateway	le	2.2.6

References

www.ibm.com/support/docview.wss?uid=ibm10716997

www.securityfocus.com/bid/104885

exchange.xforce.ibmcloud.com/vulnerabilities/130812