Vulnerability Details CVE-2017-1326
IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.2%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
References
- http://www.ibm.com/support/docview.wss?uid=swg22004274
- http://www.securityfocus.com/bid/99183
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126060
- http://www.ibm.com/support/docview.wss?uid=swg22004274
- http://www.securityfocus.com/bid/99183
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126060
Products affected by CVE-2017-1326
-
cpe:2.3:a:ibm:sterling_b2b_integrator:5.2