800 matches found
Design/Logic Flaw
IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695...
Code injection
IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626...
CVE-2017-1497
CVE-2017-1497 affects IBM Sterling File Gateway 2.2. The issue could allow an unauthorized user to view files they should not have access to by knowing the file’s directory location, indicating an information-disclosure vulnerability. According to IBM, remediation is to apply the B2B Integrator f...
CVE-2017-1487
CVE-2017-1487 – IBM Sterling File Gateway 2.2 is vulnerable to an information-disclosure flaw where an authenticated attacker could obtain sensitive data such as login IDs. The IBM Security Bulletin (IBM Sterling File Gateway 2.2) specifies CVSS v3.0: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N with a ba...
CVE-2017-1497
IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695...
CVE-2017-1487
IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626...
IBM Sterling File Gateway Cross-Site Scripting Vulnerability
IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. A cross-site scripting vulnerability exists in IBM Sterling...
Xxe
XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...
CVE-2015-0194
XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...
CVE-2015-0194
CVE-2015-0194 affects IBM Sterling B2B Integrator (versions 5.1 and 5.2) and IBM Sterling File Gateway (versions 2.1 and 2.2). The underlying issue is an XML External Entity (XXE) processing vulnerability in these products’ XML handling, allowing a remote attacker to read arbitrary files by suppl...
CVE-2017-1326
IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060...
CVE-2017-1326
IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060...
Code injection
IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060...
CVE-2017-1326
Summary of CVE-2017-1326 findings : IBM Sterling B2B Integrator 5.2 is affected by a permission-check vulnerability where the system does not properly restrict user requests based on permission level, allowing an attacker to manipulate POST parameters and update data for other users. The CVSSv3 b...
CVE-2017-1326
IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060...
CVE-2014-6199
The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service connection-slot exhaustion via a crafted HTTP request...
CVE-2014-6199
The CVE affects IBM Sterling B2B Integrator and Sterling File Gateway: HTTP Server Adapter in IBM Sterling B2B Integrator 5.1/5.2.x and Sterling File Gateway 2.1/2.2 allows remote attackers to exhaust connection slots via a crafted HTTP request, causing a denial of service. This summary uses conc...
CVE-2014-6199
The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service connection-slot exhaustion via a crafted HTTP request...
CVE-2013-5413
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by leveraging an unattended workstation...