CVE-2013-5409: SQL Injection

Published Dec 21, 2013

Updated

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected Software

2 affected components

IBM Sterling B2B Integrator=5.2

IBM Sterling File Gateway=2.2

Event History

Dec 21, 2013

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5409?

CVE-2013-5409 is considered a medium severity vulnerability due to its potential for remote SQL injection by authenticated users.

How do I fix CVE-2013-5409?

To mitigate CVE-2013-5409, users should upgrade IBM Sterling B2B Integrator to version 5.2.6 or higher and IBM Sterling File Gateway to version 2.2.3 or higher.

Who is affected by CVE-2013-5409?

CVE-2013-5409 affects users of IBM Sterling B2B Integrator version 5.2 and IBM Sterling File Gateway version 2.2.

What types of attacks can CVE-2013-5409 enable?

CVE-2013-5409 allows attackers to execute arbitrary SQL commands, which can compromise database integrity and confidentiality.

Are there any workarounds for CVE-2013-5409?

There are no published workarounds for CVE-2013-5409; upgrading to secure versions is the recommended solution.