CVE-2022-22482: Malicious File Upload
First published: Wed May 11 2022(Updated: )
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow an authenticated user to upload files that could fill up the filesystem and cause a denial of service. IBM X-Force ID: 225977.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Sterling B2B Integrator | >=6.0.0.0<=6.0.3.5 | |
| IBM Sterling B2B Integrator | >=6.1.0.0<=6.1.1.0 | |
| <=6.0.0.0 - 6.0.3.5 | ||
| <=6.1.0.0 - 6.1.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID is CVE-2022-22482.
What is the severity rating of CVE-2022-22482?
The severity rating of CVE-2022-22482 is 6.5 (Medium).
Which versions of IBM Sterling B2B Integrator are affected by this vulnerability?
IBM Sterling B2B Integrator versions 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 are affected by this vulnerability.
How can an authenticated user exploit this vulnerability?
An authenticated user can exploit this vulnerability by uploading files that could fill up the filesystem and cause a denial of service.
How can I fix CVE-2022-22482?
To fix CVE-2022-22482, apply the necessary patches provided by IBM. More information can be found at the following link: [IBM Sterling B2B Integrator Patches](http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~Other%2Bsoftware&product=ibm/Other+software/Sterling+B2B+Integrator&release=All&platform=All&function=all)
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/weakness
- agent/author
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm sterling b2b integrator
- version/ibm sterling b2b integrator/6.0.0.0
- version/ibm sterling b2b integrator/6.0.3.5
- version/ibm sterling b2b integrator/6.1.0.0
- version/ibm sterling b2b integrator/6.1.1.0
- version/ibm sterling b2b integrator/6.0.0.0 - 6.0.3.5
- version/ibm sterling b2b integrator/6.1.0.0 - 6.1.1.0