PT-2013-2373
CVE-2013-0479
·
تاريخ النشر
2013-07-03
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Sterling B2B Integrator versions 5.1 through 5.2
IBM Sterling File Gateway versions 2.1 through 2.2
Description
The issue allows remote authenticated users to bypass intended access restrictions by using a crafted filename, due to improper restriction of file types and extensions.
Recommendations
For IBM Sterling B2B Integrator versions 5.1 through 5.2, restrict file types and extensions to prevent bypassing of access restrictions.
For IBM Sterling File Gateway versions 2.1 through 2.2, restrict file types and extensions to prevent bypassing of access restrictions.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾