CVE-2017-1326

EPSS 0.8%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

22 jun 2017Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060.

Produtos afetados

IBM · Sterling B2B Integrator

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/126060 http://www.ibm.com/support/docview.wss?uid=swg22004274 http://www.securityfocus.com/bid/99183