CVE-2012-5936

no score yetEPSS 1.4%

IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-310
Published: 2013-07-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:sterling_b2b_integrator
ibm:sterling_file_gateway

References

http://www-01.ibm.com/support/docview.wss?uid=swg21627985
http://www-01.ibm.com/support/docview.wss?uid=swg21640830
https://exchange.xforce.ibmcloud.com/vulnerabilities/80401
http://www-01.ibm.com/support/docview.wss?uid=swg21627985
http://www-01.ibm.com/support/docview.wss?uid=swg21640830

Check your stack JSON