CVE-2017-1326

State: Published
Severity: Not scored
Published: Jun 22, 2017
Updated: Aug 5, 2024
Reserved: Nov 30, 2016

Description

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Sterling B2B IntegratorIBM	5.2Affected 5.2.1Affected 5.2.2Affected 5.2.3Affected 5.2.4Affected 5.2.5Affected 5.2.6Affected

References

99183vdb-entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/126060
http://www.ibm.com/support/docview.wss?uid=swg22004274

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.