IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| IBM | Sterling B2B Integrator | unaffected |
|
||||||||||||
| IBM | Sterling File Gateway | unaffected |
|
Configuration 1 [-]
| AND |
|
No data.
| Vendor | Product | Versions | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Ibm | Sterling B2b Integrator |
|
||||||||||||||||
| Ibm | Sterling File Gateway |
|
Vendor Solution
ProductVersionAPARRemediation & FixIBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.0.0 - 6.2.0.5_2 IT49168 Apply B2Bi 6.2.0.6, 6.2.1.2, 6.2.2.1IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.1.0 - 6.2.1.1_2 IT49168 Apply B2Bi 6.2.1.2, 6.2.2.1IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.2.0 - 6.2.2.0_1 IT49168 Apply B2Bi 6.2.2.1 The IIM versions of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available on Fix Central http://www-933.ibm.com/support/fixcentral/swg/selectFixes . The container version of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available in IBM Entitled Registry.
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.459% probability within 30 days)
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7280657 |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Ibm aix
Linux Linux linux Kernel Microsoft Microsoft windows |
|
| CPEs | cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm aix
Linux Linux linux Kernel Microsoft Microsoft windows |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 could allow an unauthenticated user to read sensitive information by bypassing authentication through a specially crafted HTTP request. | |
| Title | IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass | |
| First Time appeared |
Ibm
Ibm sterling B2b Integrator Ibm sterling File Gateway |
|
| Weaknesses | CWE-639 | |
| CPEs | cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm sterling B2b Integrator Ibm sterling File Gateway |
|
| References |
| |
| Metrics |
cvssV3_1
|