PT-2017-6434
CVE-2015-0194
·
تاريخ النشر
2017-08-02
·
تاريخ التحديث
2017-08-14
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Sterling B2B Integrator versions 5.1 through 5.2
IBM Sterling File Gateway versions 2.1 through 2.2
Description
The issue allows remote attackers to read arbitrary files via a crafted XML data, exploiting an XML External Entity (XXE) vulnerability.
Recommendations
For IBM Sterling B2B Integrator versions 5.1 through 5.2, update to a version that includes a fix for this issue.
For IBM Sterling File Gateway versions 2.1 through 2.2, update to a version that includes a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾