CVE-2017-1326

4.3 mediumEPSS 0.8%

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060.

Severity

CVSS 3.0

4.3 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2017-06-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:sterling_b2b_integrator

References

http://www.ibm.com/support/docview.wss?uid=swg22004274
http://www.securityfocus.com/bid/99183
https://exchange.xforce.ibmcloud.com/vulnerabilities/126060
http://www.ibm.com/support/docview.wss?uid=swg22004274
http://www.securityfocus.com/bid/99183

Check your stack JSON