What is CVE-2017-1326?

CVE-2017-1326 is a medium-severity vulnerability in IBM Sterling B2b Integrator, classified under Improper Privilege Management. CVSS score: 4.3/10. Published 2017-06-22.

How severe is CVE-2017-1326?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Privilege escalation in IBM Sterling B2b Integrator

CVE-2017-1326

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060.

Vulnerability class: Privilege Escalation

EPSS: 0.008 (52.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Ibm Sterling B2b Integrator — versions 5.2.6, 5.2.4, 5.2.1
Ibm Sterling_b2b_integrator — versions 5.2

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@us.ibm.com (VDB Entry, x_refsource_MISC, Vendor Advisory)
psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2017-1326?: CVE-2017-1326 is a medium-severity vulnerability in IBM Sterling B2b Integrator, classified under Improper Privilege Management. CVSS score: 4.3/10. Published 2017-06-22.
How severe is CVE-2017-1326?: Medium severity. CVSS v3 base score is 4.3 out of 10.