CVE-2017-1326

EPSS 0.8%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

22 Jun 2017Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060.

Affected products

IBM · Sterling B2B Integrator

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/126060 http://www.ibm.com/support/docview.wss?uid=swg22004274 http://www.securityfocus.com/bid/99183