PT-2017-6434
CVE-2015-0194
·
Published
2017-08-02
·
Updated
2017-08-14
Description by
CVSS 2.0
4.0
MediumMetricsAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Sterling B2B Integrator versions 5.1 through 5.2
IBM Sterling File Gateway versions 2.1 through 2.2
Description
The issue allows remote attackers to read arbitrary files via a crafted XML data, exploiting an XML External Entity (XXE) vulnerability.
Recommendations
For IBM Sterling B2B Integrator versions 5.1 through 5.2, update to a version that includes a fix for this issue.
For IBM Sterling File Gateway versions 2.1 through 2.2, update to a version that includes a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾