CVE-2017-1326 Vulnerability Details

  /     /     /  

CVE-2017-1326 Metadata Quick Info

CVE Published: 22/06/2017 | CVE Updated: 05/08/2024 | CVE Year: 2017
Source: ibm | Vendor: IBM | Product: Sterling B2B Integrator
Status : PUBLISHED

---

CVE-2017-1326 Description

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Bypass Security
Source: IBM

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).