CVE-2013-0481: Infoleak

Published Jul 3, 2013

Updated

The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggering (1) an error or (2) an exception.

Affected Software

4 affected components

IBM Sterling B2B Integrator=5.1

IBM Sterling B2B Integrator=5.2

IBM Sterling File Gateway=2.1

IBM Sterling File Gateway=2.2

Event History

Jul 3, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0481?

CVE-2013-0481 is considered a moderate severity vulnerability that allows remote attackers to read sensitive stack traces.

How do I fix CVE-2013-0481?

To fix CVE-2013-0481, apply the recommended patches or updates provided by IBM for the affected versions of Sterling B2B Integrator and Sterling File Gateway.

Which versions are affected by CVE-2013-0481?

CVE-2013-0481 affects IBM Sterling B2B Integrator versions 5.1 and 5.2, and IBM Sterling File Gateway versions 2.1 and 2.2.

What can attackers do with CVE-2013-0481?

Attackers can exploit CVE-2013-0481 to read stack traces that may expose sensitive information about the application.

Is CVE-2013-0481 a zero-day vulnerability?

CVE-2013-0481 is not a zero-day vulnerability as it has been disclosed and fixes are available from IBM.