CVE-2013-0479

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename.

Score

CVSS 2.0 4.0 Medium

Status

Modified - psirt@us.ibm.com

Published

2013-07-03

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Sterling B2b Integrator (Ibm)
• Sterling File Gateway (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21640830
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81547