PT-2013-5521 · Microsoft+1 · Windows+2

Publicado 2013-12-21 · Atualizado 2017-08-29 · CVE-2013-5406

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator version 5.2 IBM Sterling File Gateway version 2.2

Description The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified parameters. This leads to improper interaction with the Windows MHTML protocol handler, potentially resulting in cross-site scripting (XSS) attacks.

Recommendations For IBM Sterling B2B Integrator version 5.2, update to a version that addresses the XSS vulnerabilities. For IBM Sterling File Gateway version 2.2, update to a version that addresses the XSS vulnerabilities. As a temporary workaround, consider restricting access to unspecified parameters to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-5406

Produtos afetados

Ibm Sterling B2B Integrator

Ibm Sterling File Gateway

Windows

Referências · 5

• http://www-01.ibm.com/support/docview.wss?uid=swg1IC96055 · Aviso do Fabricante
• http://securityfocus.com/bid/64446 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87355 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21657539 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-5406 · Nota de Segurança