IBM Sterling B2B Integrator And IBM Sterling File Gateway Session Hijacking Vulnerability

Bugtraq ID:	60988
Class:	Design Error
CVE:	CVE-2013-0539
Remote:	Yes
Local:	No
Published:	Jun 30 2013 12:00AM
Updated:	Jun 30 2013 12:00AM
Credit:	IBM
Vulnerable:	IBM Sterling File Gateway 2.2 IBM Sterling File Gateway 2.1 IBM Sterling B2B Integrator 5.2 IBM Sterling B2B Integrator 5.1
Not Vulnerable:

IBM Sterling B2B Integrator And IBM Sterling File Gateway Session Hijacking Vulnerability

IBM Sterling B2B Integrator and IBM Sterling File Gateway is prone to a session-hijacking vulnerability.

An attacker can exploit this issue to gain unauthorized access to the affected application.

The following products are vulnerable:

IBM Sterling B2B Integrator 5.2 and 5.1
IBM Sterling File Gateway 2.2 and 2.1

IBM Sterling B2B Integrator And IBM Sterling File Gateway Session Hijacking Vulnerability

Attackers can exploit this issue with a web browser.

IBM Sterling B2B Integrator And IBM Sterling File Gateway Session Hijacking Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Sterling B2B Integrator And IBM Sterling File Gateway Session Hijacking Vulnerability

References:

• IBM Homepage (IBM)
  
• IC92007: SECURITY VULNERABILITY: SESSION ID LENGTH LESS THAN 128 BIT Insufficien (IBM)
  
• Security Bulletin: Vulnerabilities in IBM Sterling B2B Integrator and IBM Sterli (IBM)