IBM Sterling B2B Integrator and IBM Sterling File Gateway Unspecified SQL-Injection Vulnerability

Bugtraq ID:	60998
Class:	Input Validation Error
CVE:	CVE-2013-0560
Remote:	Yes
Local:	No
Published:	Jul 01 2013 12:00AM
Updated:	Jul 01 2013 12:00AM
Credit:	IBM
Vulnerable:	IBM Sterling File Gateway 2.2 IBM Sterling File Gateway 2.1 IBM Sterling B2B Integrator 5.2 IBM Sterling B2B Integrator 5.1
Not Vulnerable:

IBM Sterling B2B Integrator and IBM Sterling File Gateway Unspecified SQL-Injection Vulnerability

IBM Sterling B2B Integrator and IBM Sterling File Gateway are prone to an unspecified SQL-injection vulnerability because they fail to sufficiently sanitize user-supplied data.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The following product versions are vulnerable:

IBM Sterling B2B Integrator 5.2 and 5.1
IBM Sterling File Gateway 2.2 and 2.1

IBM Sterling B2B Integrator and IBM Sterling File Gateway Unspecified SQL-Injection Vulnerability

An attacker can exploit this issue using a web browser.

IBM Sterling B2B Integrator and IBM Sterling File Gateway Unspecified SQL-Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Sterling B2B Integrator and IBM Sterling File Gateway Unspecified SQL-Injection Vulnerability

References:

• IBM Sterling B2B Integrator Homepage (IBM)
  
• IBM Sterling File Gateway Homepage (IBM )
  
• Security Bulletin: Vulnerabilities in IBM Sterling B2B Integrator and IBM Sterli (IBM)