CVE-2012-5937 Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2....
HighCVSS 9.3
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2.2 and other products, allows remote attackers to execute arbitrary commands via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm gentran integration suite | = 4.3 | No fix listed |
| ibm sterling b2b integrator | = 5.2 | No fix listed |
| ibm sterling file gateway | = 1.1 | No fix listed |
| ibm sterling file gateway | = 2.0 | No fix listed |
| ibm sterling file gateway | = 2.1 | No fix listed |
| ibm sterling file gateway | = 2.2 | No fix listed |
| ibm sterling integrator | = 5.0 | No fix listed |
| ibm sterling integrator | = 5.1 | No fix listed |
References
- IC85189 vendor-advisory
- www.ibm.com vendor-advisory
- sterling-b2b-command-execution(80403) vdb-entry