CVE-2013-0479: Medium severity ibm b2b sterling integrator vulnerability

Published Jul 3, 2013

Updated

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not properly restrict file types and extensions, which allows remote authenticated users to bypass intended access restrictions via a crafted filename.

Affected Software

4 affected components

IBM Sterling B2B Integrator=5.1

IBM Sterling B2B Integrator=5.2

IBM Sterling File Gateway=2.1

IBM Sterling File Gateway=2.2

Event History

Jul 3, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0479?

CVE-2013-0479 has a medium severity rating due to issues with file type restrictions.

How do I fix CVE-2013-0479?

To fix CVE-2013-0479, update to the latest versions of IBM Sterling B2B Integrator or Sterling File Gateway that address this vulnerability.

Who is affected by CVE-2013-0479?

CVE-2013-0479 affects IBM Sterling B2B Integrator versions 5.1 and 5.2, and Sterling File Gateway versions 2.1 and 2.2.

What is the impact of CVE-2013-0479?

The impact of CVE-2013-0479 allows remote authenticated users to bypass intended access restrictions via crafted filenames.

Is there a workaround for CVE-2013-0479?

There is no official workaround for CVE-2013-0479, so applying the available updates is the recommended action.