CVE-2017-1326

EPSS 0.8%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

22 jun 2017Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060.

Productos afectados

IBM · Sterling B2B Integrator

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/126060 http://www.ibm.com/support/docview.wss?uid=swg22004274 http://www.securityfocus.com/bid/99183