PT-2018-4131
CVE-2014-0927
·
تاريخ النشر
2018-04-20
·
تاريخ التحديث
2018-05-22
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Sterling B2B Integrator versions 5.1 through 5.2
IBM Sterling File Gateway versions 2.1 through 2.2
Description
The issue allows remote attackers to bypass authentication in the ActiveMQ admin user interface by leveraging knowledge of the port number and webapp path.
Recommendations
For IBM Sterling B2B Integrator versions 5.1 through 5.2, restrict access to the ActiveMQ admin user interface until a fix is available.
For IBM Sterling File Gateway versions 2.1 through 2.2, restrict access to the ActiveMQ admin user interface until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾