CVE-2013-3020: Infoleak

Published Jul 3, 2013

Updated

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors, a different vulnerability than CVE-2013-0463, CVE-2013-2985, CVE-2013-2987, CVE-2013-0568, CVE-2013-0475, and CVE-2013-0567.

Affected Software

4 affected components

IBM Sterling B2B Integrator=5.1

IBM Sterling B2B Integrator=5.2

IBM Sterling File Gateway=2.1

IBM Sterling File Gateway=2.2

Event History

Jul 3, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-3020?

The severity of CVE-2013-3020 is classified as Medium, as it allows authenticated users to access sensitive information.

How do I fix CVE-2013-3020?

To fix CVE-2013-3020, upgrade IBM Sterling B2B Integrator to version 5.3 or later, or upgrade to IBM Sterling File Gateway version 2.3 or later.

Who is affected by CVE-2013-3020?

CVE-2013-3020 affects users of IBM Sterling B2B Integrator versions 5.1 and 5.2, as well as IBM Sterling File Gateway versions 2.1 and 2.2.

What type of vulnerability is CVE-2013-3020?

CVE-2013-3020 is a vulnerability that allows remote authenticated users to gain access to sensitive application data.

Is CVE-2013-3020 related to other vulnerabilities?

Yes, CVE-2013-3020 is a different vulnerability from others listed like CVE-2013-0463 and CVE-2013-2985, which also pertain to IBM software.