VulnerabilityModified
CVE-2013-2984
Directory traversal vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to read or modify files via unspecified vectors.
MEDIUM 6.5EPSS 1.54%
Does this matter?
Lower severity and a low EPSS score (1.54%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote authenticated users to read or modify files via unspecified vectors.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 1.54% probability · 74th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- ibm/sterling b2b integrator · ibm/sterling file gateway
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC91046Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21640830Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84006
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC91046Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21640830Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84006
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.