CVE-2013-5407: Input Validation

Published Dec 21, 2013

Updated

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information via a crafted web site, related to a "frame injection" issue.

Affected Software

2 affected components

IBM Sterling B2B Integrator=5.2

IBM Sterling File Gateway=2.2

Event History

Dec 21, 2013

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5407?

CVE-2013-5407 is rated as a moderate severity vulnerability due to the potential for sensitive information exposure.

How do I fix CVE-2013-5407?

To remediate CVE-2013-5407, upgrade IBM Sterling B2B Integrator to version 5.2.0 or later and IBM Sterling File Gateway to version 2.2.0 or later.

What systems are affected by CVE-2013-5407?

CVE-2013-5407 affects IBM Sterling B2B Integrator version 5.2 and IBM Sterling File Gateway version 2.2.

What type of attacks can CVE-2013-5407 enable?

CVE-2013-5407 allows remote authenticated users to perform frame injection attacks, bypassing intended access restrictions.

Is there a workaround for CVE-2013-5407?

As of now, the best course of action for CVE-2013-5407 is to apply the recommended software upgrades, as no official workaround is provided.