Design/Logic Flaw

2017-12-1121:29:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.9%

JSON

IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing “dot dot” sequences (/…/) to view arbitrary files on the system. IBM X-Force ID: 131288.

CPENameOperatorVersion
sterling_file_gatewayeq2.2

CPE	Name	Operator	Version
	sterling_file_gateway	eq	2.2

References

www.ibm.com/support/docview.wss?uid=swg22010738

www.securityfocus.com/bid/102187

exchange.xforce.ibmcloud.com/vulnerabilities/131288