CVE-2013-0560: SQL Injection

Published Jul 3, 2013

Updated

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2012-5766.

Affected Software

4 affected components

IBM Sterling B2B Integrator=5.1

IBM Sterling B2B Integrator=5.2

IBM Sterling File Gateway=2.1

IBM Sterling File Gateway=2.2

Event History

Jul 3, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0560?

CVE-2013-0560 is rated as a medium severity vulnerability that allows remote authenticated users to execute arbitrary SQL commands.

How do I fix CVE-2013-0560?

To fix CVE-2013-0560, update IBM Sterling B2B Integrator to version 5.3 or later and IBM Sterling File Gateway to version 2.3 or later.

What products are affected by CVE-2013-0560?

CVE-2013-0560 affects IBM Sterling B2B Integrator versions 5.1 and 5.2, and IBM Sterling File Gateway versions 2.1 and 2.2.

Can CVE-2013-0560 be exploited remotely?

Yes, CVE-2013-0560 can be exploited remotely by authenticated users to execute SQL commands.

What types of attacks does CVE-2013-0560 allow?

CVE-2013-0560 allows attackers to perform SQL injection attacks that can compromise data integrity and confidentiality.