Vulnerability in Ibm Sterling_b2b_integrator

CVE-2015-5019

IBM Sterling Integrator 5.1 before 5010004_8 and Sterling B2B Integrator 5.2 before 5020500_9 allow remote authenticated users to read or upload files by leveraging a password-change requirement.

EPSS: 0.009 (57.3th percentile) — read the EPSS interpretation.

Affected products

Ibm Sterling_b2b_integrator — versions 5.2
Ibm Sterling_integrator — versions 5.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@us.ibm.com (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)