PT-2017-6434
CVE-2015-0194
·
Publicado
2017-08-02
·
Atualizado
2017-08-14
Descrição por
CVSS 2.0
4.0
MédiaMétricasAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Sterling B2B Integrator versions 5.1 through 5.2
IBM Sterling File Gateway versions 2.1 through 2.2
Description
The issue allows remote attackers to read arbitrary files via a crafted XML data, exploiting an XML External Entity (XXE) vulnerability.
Recommendations
For IBM Sterling B2B Integrator versions 5.1 through 5.2, update to a version that includes a fix for this issue.
For IBM Sterling File Gateway versions 2.1 through 2.2, update to a version that includes a fix for this issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾