CVEvulnerability
CVE-2013-0479
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename.
Affected configurations
• ibm sterling b2b integrator 5.1
• ibm sterling b2b integrator 5.2
• ibm sterling file gateway 2.1
• ibm sterling file gateway 2.2
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21640830 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81547 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21640830 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81547 exchange.xforce.ibmcloud.com