CVE-2013-2985: Infoleak

Published Jul 3, 2013

Updated

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2987, CVE-2013-3020, CVE-2013-0568, CVE-2013-0475, and CVE-2013-0567.

Affected Software

4 affected components

IBM Sterling B2B Integrator=5.1

IBM Sterling B2B Integrator=5.2

IBM Sterling File Gateway=2.1

IBM Sterling File Gateway=2.2

Event History

Jul 3, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-2985?

CVE-2013-2985 is classified as a medium severity vulnerability.

How do I fix CVE-2013-2985?

To fix CVE-2013-2985, apply the recommended patches from IBM for Sterling B2B Integrator and Sterling File Gateway.

Who is affected by CVE-2013-2985?

CVE-2013-2985 affects users of IBM Sterling B2B Integrator versions 5.1 and 5.2, and Sterling File Gateway versions 2.1 and 2.2.

What kind of information can be exposed due to CVE-2013-2985?

CVE-2013-2985 allows remote authenticated users to access sensitive information about the application implementation.

Is CVE-2013-2985 part of a larger series of vulnerabilities?

Yes, CVE-2013-2985 is related to several other vulnerabilities, including CVE-2013-0463 and CVE-2013-2987.