CVE-2022-22482: Malicious File Upload

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/225977
• https://www.ibm.com/support/pages/node/6586576 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6586576

Frequently Asked Questions

• What is the vulnerability ID of this security issue?

  The vulnerability ID is CVE-2022-22482.

• What is the severity rating of CVE-2022-22482?

  The severity rating of CVE-2022-22482 is 6.5 (Medium).

• Which versions of IBM Sterling B2B Integrator are affected by this vulnerability?

  IBM Sterling B2B Integrator versions 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 are affected by this vulnerability.

• How can an authenticated user exploit this vulnerability?

  An authenticated user can exploit this vulnerability by uploading files that could fill up the filesystem and cause a denial of service.

• How can I fix CVE-2022-22482?

  To fix CVE-2022-22482, apply the necessary patches provided by IBM. More information can be found at the following link: [IBM Sterling B2B Integrator Patches](http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~Other%2Bsoftware&product=ibm/Other+software/Sterling+B2B+Integrator&release=All&platform=All&function=all)