Vulnerability in IBM Sterling B2b Integrator

CVE-2014-6199

The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service (connection-slot exhaustion) via a crafted HTTP request.

EPSS: 0.020 (79.1th percentile) — read the EPSS interpretation.

Affected products

Ibm Sterling_b2b_integrator — versions 5.1, 5.2, 5.2.1
Ibm Sterling_file_gateway — versions 2.1, 2.2
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (x_refsource_SECUNIA, third-party-advisory)