First published: Sat Dec 21 2013(Updated: )
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by leveraging an unattended workstation.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Sterling B2B Integrator | =5.2 | |
IBM Sterling File Gateway | =2.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-5413 is classified as a medium severity vulnerability due to its potential for session hijacking.
To fix CVE-2013-5413, upgrade to the latest version of IBM Sterling B2B Integrator or IBM Sterling File Gateway that addresses this vulnerability.
CVE-2013-5413 can be exploited by remote attackers leveraging an unattended workstation to bypass authentication.
CVE-2013-5413 affects IBM Sterling B2B Integrator version 5.2 and IBM Sterling File Gateway version 2.2.
Failing to mitigate CVE-2013-5413 can lead to unauthorized access to sensitive data and actions performed by an authenticated user.