First published: Wed Jul 03 2013(Updated: )
An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive information, via a brute-force attack.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM B2B Sterling Integrator | =5.1 | |
IBM B2B Sterling Integrator | =5.2 | |
IBM Sterling File Gateway | =2.1 | |
IBM Sterling File Gateway | =2.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-0539 is considered a medium severity vulnerability due to the potential for session hijacking.
To fix CVE-2013-0539, it is recommended to update to the latest version of IBM Sterling B2B Integrator or Sterling File Gateway.
CVE-2013-0539 affects IBM Sterling B2B Integrator versions 5.1 and 5.2, and Sterling File Gateway versions 2.1 and 2.2.
The implications of CVE-2013-0539 include potential unauthorized access to sensitive information through session hijacking.
As of now, there is no specific evidence indicating that CVE-2013-0539 is actively being exploited in the wild.