5
CVE-2013-0539
- EPSS 0.28%
- Published 03.07.2013 13:54:31
- Last modified 11.04.2025 00:51:21
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijack sessions, and consequently obtain sensitive information, via a brute-force attack.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Sterling B2b Integrator Version5.1
Ibm ≫ Sterling B2b Integrator Version5.2
Ibm ≫ Sterling File Gateway Version2.1
Ibm ≫ Sterling File Gateway Version2.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Type | Source | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.28% | 0.48 |
Source | Base Score | Exploit Score | Impact Score | Vector string |
---|---|---|---|---|
nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|