IBM Sterling B2B Integrator and File Gateway Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in IBM Sterling B2B Integrator and IBM Sterling File Gateway. This issue affects versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0. The vulnerability allows an unauthenticated attacker to send a specially crafted request that causes the application to crash.

Impact

Exploitation of this vulnerability leads to a crash of the application, causing a denial-of-service condition.

Remediation

Users can upgrade to IBM Sterling B2B Integrator or IBM Sterling File Gateway versions 6.1.2.8, 6.2.0.5_2, 6.2.1.1_2 or 6.2.2.0_1. The IIM versions of these releases are available on Fix Central, and the container versions can be found in the IBM Entitled Registry.