IBM Sterling File Gateway Information Disclosure Vulnerability (CNVD-2021-87025)

IBM Sterling File Gateway is a suite of file transfer software from IBM Corporation. The software integrates different file transfer activity centers and helps file-based data to be securely exchanged over the Internet.An information disclosure vulnerability exists in IBM Sterling File Gateway, which stems from the fact that IBM Sterling File Gateway can allow a remotely authenticated user to access sensitive information. An attacker could exploit the vulnerability by sending a specially crafted request that could expose a valid file path on the server, which could be used to further attack the system.