CVE-2012-5937 Command injection in n/a
Remote attackers can execute arbitrary commands on IBM Sterling Integrator servers via unspecified vectors in the CLA2 server.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-5937?
CVE-2012-5937 is a critical command injection vulnerability in Ibm Sterling B2b Integrator, published on 12 Apr 2013. It can be exploited over the network, with no action from the victim.
Official description
Unspecified vulnerability in the CLA2 server in IBM Gentran Integration Suite 4.3, Sterling Integrator 5.0 and 5.1, and Sterling B2B Integrator 5.2, as used in IBM Sterling File Gateway 1.1 through 2.2 and other products, allows remote attackers to execute arbitrary commands via unknown vectors.
Which versions are affected by CVE-2012-5937?
It affects 4 products.
Products include Ibm Gentran Integration Suite, Ibm Sterling B2b Integrator, Ibm Sterling File Gateway, Ibm Sterling Integrator.
How do I fix CVE-2012-5937?
No fix has been published for CVE-2012-5937 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2012-5937 being exploited?
There is no known exploitation of CVE-2012-5937 in the wild and no public exploit code.
Sources
Also known as GHSA-3x98-xr5x-2c7r.