PT-2013-1850 · Ibm · Ibm Gentran Integration Suite+3

Published 2013-04-12 · Updated 2017-08-29 · CVE-2012-5937

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Gentran Integration Suite version 4.3 Sterling Integrator versions 5.0 through 5.1 Sterling B2B Integrator version 5.2 IBM Sterling File Gateway versions 1.1 through 2.2

Description The issue allows remote attackers to execute arbitrary commands. The exact vectors used for the attack are not specified.

Recommendations For IBM Gentran Integration Suite version 4.3, update to a version that includes a fix for this issue. For Sterling Integrator versions 5.0 through 5.1, update to a version that includes a fix for this issue. For Sterling B2B Integrator version 5.2, update to a version that includes a fix for this issue. For IBM Sterling File Gateway versions 1.1 through 2.2, update to a version that includes a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2012-5937

Affected Products

Ibm Gentran Integration Suite

Ibm Sterling File Gateway

Sterling B2B Integrator

Sterling Integrator

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-5937 · Security Note
• http://ibm.com/support/docview.wss?uid=swg21633925 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC85189 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80403 · Note