IBM Sterling B2B Integrator And Sterling File Gateway Cookies Session Hijacking Vulnerability

Bugtraq ID:	60984
Class:	Unknown
CVE:	CVE-2013-0456
Remote:	No
Local:	Yes
Published:	Jun 28 2013 12:00AM
Updated:	Jun 28 2013 12:00AM
Credit:	IBM
Vulnerable:	IBM Sterling File Gateway 2.2 IBM Sterling File Gateway 2.1 IBM Sterling B2B Integrator 5.2 IBM Sterling B2B Integrator 5.1
Not Vulnerable:

IBM Sterling B2B Integrator And Sterling File Gateway Cookies Session Hijacking Vulnerability

IBM Sterling B2B Integrator and Sterling File Gateway is prone to a session-hijacking vulnerability.

An attacker can exploit this issue to gain unauthorized access to the affected application.

The following products are vulnerable:

IBM Sterling B2B Integrator 5.2 and 5.1
IBM Sterling File Gateway 2.2 and 2.1

IBM Sterling B2B Integrator And Sterling File Gateway Cookies Session Hijacking Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Sterling B2B Integrator And Sterling File Gateway Cookies Session Hijacking Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Sterling B2B Integrator And Sterling File Gateway Cookies Session Hijacking Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: Vulnerabilities in IBM Sterling B2B Integrator and IBM Sterli (IBM)