Design/Logic Flaw

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive information about application implementation via unspecified vectors...

Code injection

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...

Code injection

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-3020, CVE-2013-0568,...

Code injection

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568,...

Code injection

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568,...

Sql injection

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via vectors involving the RNVisibility page and unspecified screens, a different vulnerability than...

Code injection

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...

Code injection

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...

Session fixation

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

Code injection

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-0568,...

Design/Logic Flaw

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename...

CVE-2012-5936

Summary (CVE-2012-5936) IBM Sterling B2B Integrator (versions 5.1/5.2) and IBM Sterling File Gateway (2.1/2.2) do not set the secure attribute on session cookies in HTTPS sessions, enabling potential cookie hijacking if captured over HTTP. Affected products/versions (from available docs): IBM Ste...

CVE-2012-5936

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2013-2984

Path traversal vulnerability CVE-2013-2984 affects IBM Sterling B2B Integrator 5.1/5.2 and IBM Sterling File Gateway 2.1/2.2. The IBM security bulletin describes that a path traversal could allow a remote authenticated attacker to read or modify restricted files. Affected product versions are exp...

CVE-2013-0481

CVE-2013-0481 affects IBM Sterling B2B Integrator (versions 5.0–5.2) and IBM Sterling File Gateway (versions 2.0–2.2). The issue: errors or exceptions in the console processing may cause stack traces to be displayed in responses, potentially exposing internal implementation details. The CVE is do...

CVE-2013-0456

CVE-2013-0456 affects IBM Sterling B2B Integrator (5.1/5.2) and IBM Sterling File Gateway (2.1/2.2). The connected IBM Security Bulletin confirms a session hijacking risk via a modified cookie path, describing it as an authenticated remote-access issue. Public details list affected products/versi...

CVE-2013-0476

CVE-2013-0476 affects IBM Sterling B2B Integrator (5.1, 5.2) and IBM Sterling File Gateway (2.1, 2.2). The IBM Security Bulletin documents this as a Command Injection vulnerability allowing a remote attacker to inject arbitrary FTP commands via unspecified vectors, potentially compromising the se...

CVE-2013-0558

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive information about application implementation via unspecified vectors...

CVE-2013-0463

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568,...

CVE-2013-0475

The connected IBM security bulletin confirms Information Disclosure vulnerabilities in IBM Sterling B2B Integrator (5.1/5.2) and IBM Sterling File Gateway (2.1/2.2) tied to multiple CVEs (e.g., CVE-2013-0463, CVE-2013-0475, CVE-2013-0567, CVE-2013-0568, CVE-2013-2985/2987/3020, etc.). These are d...