Path traversal

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path...

Code injection

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to upload arbitrary files via unspecified vectors...

Design/Logic Flaw

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename...

CVE-2012-5936

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2012-5936

Summary (CVE-2012-5936) IBM Sterling B2B Integrator (versions 5.1/5.2) and IBM Sterling File Gateway (2.1/2.2) do not set the secure attribute on session cookies in HTTPS sessions, enabling potential cookie hijacking if captured over HTTP. Affected products/versions (from available docs): IBM Ste...

CVE-2013-0558

CVE-2013-0558 affects IBM Sterling B2B Integrator 5.1/5.2 and IBM Sterling File Gateway 2.1/2.2. The IBM security bulletin documents this as an Information Disclosure vulnerability allowing remote attackers to obtain sensitive information about application implementation via unspecified vectors. ...

CVE-2013-0481

The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggering 1 an error or 2 an exception...

CVE-2013-0568

IBM Sterling B2B Integrator (versions 5.1 and 5.2) and IBM Sterling File Gateway (versions 2.1 and 2.2) are affected by an Information Disclosure vulnerability (CVE-2013-0568) described as allowing remote authenticated users to obtain sensitive information about application implementation via uns...

CVE-2013-0567

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-3020,...

CVE-2013-2985

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568,...

CVE-2013-0476

CVE-2013-0476 affects IBM Sterling B2B Integrator (5.1, 5.2) and IBM Sterling File Gateway (2.1, 2.2). The IBM Security Bulletin documents this as a Command Injection vulnerability allowing a remote attacker to inject arbitrary FTP commands via unspecified vectors, potentially compromising the se...

CVE-2013-0558

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive information about application implementation via unspecified vectors...

CVE-2013-0463

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-2985, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568,...

CVE-2013-0560

CVE-2013-0560 : IBM Sterling B2B Integrator (versions 5.1/5.2/5.0) and IBM Sterling File Gateway (2.2/2.1/2.0) are affected by multiple SQL Injection vulnerabilities. The IBM bulletin describes an authenticated remote attacker who can send specially crafted SQL statements through various screens ...

CVE-2012-5766

CVE-2012-5766 is described in IBM’s Security Bulletin as an SQL injection issue in IBM Sterling B2B Integrator and Sterling File Gateway. The advisory explicitly ties this CVE to improper validation of user-supplied input on select Sterling screens, affecting IBM Sterling B2B Integrator 5.0–5.2 a...

CVE-2013-0475

The connected IBM security bulletin confirms Information Disclosure vulnerabilities in IBM Sterling B2B Integrator (5.1/5.2) and IBM Sterling File Gateway (2.1/2.2) tied to multiple CVEs (e.g., CVE-2013-0463, CVE-2013-0475, CVE-2013-0567, CVE-2013-0568, CVE-2013-2985/2987/3020, etc.). These are d...

CVE-2013-0456

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to hijack sessions via a modified cookie path...

CVE-2012-5766

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via vectors involving the RNVisibility page and unspecified screens, a different vulnerability than...

CVE-2013-0567

CVE-2013-0567 affects IBM Sterling File Gateway (2.2 and 2.1) and is described in IBM’s security bulletin as an Information Disclosure vulnerability in that product. The connected IBM bulletin lists multiple related vulnerabilities and remediation steps (APARs/iFixes) for the affected IBM Sterlin...

CVE-2013-2987

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-3020, CVE-2013-0568,...