CVE-2015-0194: XEE

Published Aug 2, 2017

Updated

XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data.

Affected Software

4 affected components

IBM Sterling B2B Integrator=5.1

IBM Sterling B2B Integrator=5.2

IBM Sterling File Gateway=2.1

IBM Sterling File Gateway=2.2

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21699482

Event History

Aug 2, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0194?

CVE-2015-0194 is classified as a medium severity vulnerability that allows remote attackers to exploit an XML External Entity (XXE) issue.

How do I fix CVE-2015-0194?

To fix CVE-2015-0194, you should upgrade to the latest versions of IBM Sterling B2B Integrator or IBM Sterling File Gateway that have addressed this vulnerability.

What systems are affected by CVE-2015-0194?

CVE-2015-0194 affects IBM Sterling B2B Integrator versions 5.1 and 5.2, as well as IBM Sterling File Gateway versions 2.1 and 2.2.

What type of attack does CVE-2015-0194 enable?

CVE-2015-0194 enables attackers to read arbitrary files on the server through crafted XML data.

Is user authentication needed to exploit CVE-2015-0194?

CVE-2015-0194 can be exploited without authentication, making it a higher risk for unprotected systems.