APAR status
Closed as program error.
Error description
Path traversal is possible in IBM Sterling B2B Integrator and IBM Sterling File Gateway. Successful attacker could gain access to restricted files.
Local fix
No
Problem summary
Path traversal is possible in IBM Sterling B2B Integrator and IBM Sterling File Gateway. Successful attacker could gain access to restricted files.
Problem conclusion
Resolution Summary: Security vulnerability has been resolved. Delivered In: 5104_1 5020401_3 5020402
Temporary fix
Comments
APAR Information
APAR number
IC91046
Reported component name
STR FILE GATEWA
Reported component ID
5725D0700
Reported release
224
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2013-03-22
Closed date
2013-06-29
Last modified date
2013-12-06
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
STR FILE GATEWA
Fixed component ID
5725D0700
Applicable component levels
R210 PSY
UP
R224 PSY
UP
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS4TGX","label":"IBM Sterling File Gateway"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"2.2","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]
Document Information
Modified date:
06 December 2013