Description
IBM Sterling Integrator 5.1 before 5010004_8 and Sterling B2B Integrator 5.2 before 5020500_9 allow remote authenticated users to read or upload files by leveraging a password-change requirement.
References
- IT11008 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21967781