Unrated severityNVD Advisory· Published Jul 3, 2013· Updated Jun 16, 2026
CVE-2012-5936
CVE-2012-5936
Description
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 do not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:sterling_b2b_integrator:5.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sterling_b2b_integrator:5.2:*:*:*:*:*:*:*
- (no CPE)range: 5.1, 5.2
cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:sterling_file_gateway:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sterling_file_gateway:2.2:*:*:*:*:*:*:*
- (no CPE)range: 2.1, 2.2
Patches
Vulnerability mechanics
References
3- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/80401nvd
News mentions
0No linked articles in our index yet.