IBM Sterling B2B Integrator and Sterling File Gateway Unspecified Frame Injection Vulnerability
BID:64449
Info
IBM Sterling B2B Integrator and Sterling File Gateway Unspecified Frame Injection Vulnerability
| Bugtraq ID: | 64449 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-5407 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 04 2013 12:00AM |
| Updated: | Jan 28 2014 01:03AM |
| Credit: | IBM |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
IBM Sterling B2B Integrator and Sterling File Gateway Unspecified Frame Injection Vulnerability
IBM Sterling B2B Integrator and IBM Sterling File Gateway are prone to an unspecified frame-injection vulnerability.
An attacker can exploit this issue to conduct phishing attacks. Successful exploits will allow the attacker to gain unauthorized access or obtain sensitive information.
The following product versions are vulnerable:
IBM Sterling B2B Integrator 5.2
IBM Sterling File Gateway 2.2
IBM Sterling B2B Integrator and IBM Sterling File Gateway are prone to an unspecified frame-injection vulnerability.
An attacker can exploit this issue to conduct phishing attacks. Successful exploits will allow the attacker to gain unauthorized access or obtain sensitive information.
The following product versions are vulnerable:
IBM Sterling B2B Integrator 5.2
IBM Sterling File Gateway 2.2
Exploit / POC
IBM Sterling B2B Integrator and Sterling File Gateway Unspecified Frame Injection Vulnerability
Attackers can exploit this issue using browser.
Attackers can exploit this issue using browser.
Solution / Fix
IBM Sterling B2B Integrator and Sterling File Gateway Unspecified Frame Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM Sterling B2B Integrator and Sterling File Gateway Unspecified Frame Injection Vulnerability
References:
References: