CVE-2015-5019: Medium severity ibm b2b sterling integrator vulnerability

Published Nov 8, 2015

Updated

IBM Sterling Integrator 5.1 before 50100048 and Sterling B2B Integrator 5.2 before 50205009 allow remote authenticated users to read or upload files by leveraging a password-change requirement.

Affected Software

2 affected components

IBM Sterling B2B Integrator=5.2

IBM Sterling Integrator=5.1

Event History

Nov 8, 2015

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-5019?

CVE-2015-5019 is considered to have a medium severity level due to its ability to allow remote authenticated users to read or upload files.

How do I fix CVE-2015-5019?

To fix CVE-2015-5019, ensure that you upgrade IBM Sterling Integrator to version 5.1_5010004_8 or later and Sterling B2B Integrator to version 5.2_5020500_9 or later.

Who is affected by CVE-2015-5019?

CVE-2015-5019 affects users of IBM Sterling Integrator version 5.1 before 5010004_8 and IBM Sterling B2B Integrator version 5.2 before 5020500_9.

What types of vulnerabilities does CVE-2015-5019 involve?

CVE-2015-5019 involves vulnerabilities that allow remote authenticated users to exploit the system by reading or uploading files.

Is there a workaround for CVE-2015-5019 before applying a fix?

There are no documented workarounds for CVE-2015-5019, so upgrading to a patched version is necessary.