4.9
CVSSv2

CVE-2013-5407

Published: 21/12/2013 Updated: 29/08/2017
CVSS v2 Base Score: 4.9 | Impact Score: 4.9 | Exploitability Score: 6.8
VMScore: 436
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N

Vulnerability Summary

IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information via a crafted web site, related to a "frame injection" issue.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm sterling file gateway 2.2

ibm sterling b2b integrator 5.2