PT-2017-12965 · Ibm · Ibm Sterling File Gateway

Publicado 2017-06-22 · Atualizado 2019-10-03 · CVE-2017-1326

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway (affected versions not specified)

Description The issue allows users to update data related to other users by manipulating parameters passed in the POST request, due to improper restriction of user requests based on permission level.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2017-1326

Produtos afetados

Ibm Sterling File Gateway

Referências · 5

• http://ibm.com/support/docview.wss?uid=swg22004274 · Aviso do Fabricante
• http://securityfocus.com/bid/99183 · Nota
• https://osv.dev/vulnerability/CVE-2017-1326 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1326 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/126060 · Aviso do Fabricante