PT-2013-1850 · Ibm · Ibm Gentran Integration Suite+3

Publicado 2013-04-12 · Atualizado 2017-08-29 · CVE-2012-5937

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Gentran Integration Suite version 4.3 Sterling Integrator versions 5.0 through 5.1 Sterling B2B Integrator version 5.2 IBM Sterling File Gateway versions 1.1 through 2.2

Description The issue allows remote attackers to execute arbitrary commands. The exact vectors used for the attack are not specified.

Recommendations For IBM Gentran Integration Suite version 4.3, update to a version that includes a fix for this issue. For Sterling Integrator versions 5.0 through 5.1, update to a version that includes a fix for this issue. For Sterling B2B Integrator version 5.2, update to a version that includes a fix for this issue. For IBM Sterling File Gateway versions 1.1 through 2.2, update to a version that includes a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2012-5937

Produtos afetados

Ibm Gentran Integration Suite

Ibm Sterling File Gateway

Sterling B2B Integrator

Sterling Integrator

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-5937 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=swg21633925 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80403 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC85189 · Aviso do Fabricante