VulnerabilityModified
CVE-2013-0539
An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive…
MEDIUM 5.0EPSS 1.35%
Does this matter?
Lower severity and a low EPSS score (1.35%). Track it; it rarely justifies an emergency change on its own.
Description
An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive information, via a brute-force attack.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.35% probability · 70th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-255
- Affected
- ibm/sterling b2b integrator · ibm/sterling file gateway
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC92007Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21640830Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82916
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC92007Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21640830Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82916
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.