Description
IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
IBM Sterling B2B Integrator
Default version status: unaffected
6.2.1.0 to ≤ 6.2.1.1_2affected6.2.2.0 to ≤ 6.2.2.0_1affected
IBM Sterling File Gateway
Default version status: unaffected
6.2.1.0 to ≤ 6.2.1.1_2affected6.2.2.0 to ≤ 6.2.2.0_1affected