IBM Sterling B2B Integrator and Sterling File Gateway CVE-2013-5411 Link Injection Vulnerability

Bugtraq ID:	64447
Class:	Input Validation Error
CVE:	CVE-2013-5411
Remote:	Yes
Local:	No
Published:	Dec 04 2013 12:00AM
Updated:	Jan 28 2014 01:03AM
Credit:	IBM
Vulnerable:
Not Vulnerable:

IBM Sterling B2B Integrator and Sterling File Gateway CVE-2013-5411 Link Injection Vulnerability

IBM Sterling B2B Integrator and Sterling File Gateway are prone to a link injection vulnerability.

Attackers can exploit this issue to inject arbitrary links to different pages within the application. This may allow an attacker to perform phishing attacks by presenting false information that may appear to be legitimate application pages.

The following product versions are vulnerable:

IBM Sterling B2B Integrator 5.2
IBM Sterling File Gateway 2.2

IBM Sterling B2B Integrator and Sterling File Gateway CVE-2013-5411 Link Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Sterling B2B Integrator and Sterling File Gateway CVE-2013-5411 Link Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Sterling B2B Integrator and Sterling File Gateway CVE-2013-5411 Link Injection Vulnerability

References: