Information disclosure

2018-07-2016:29:00

PRIOn knowledge base

www.prio-n.com

4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

JSON

IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote authenticated attacker to obtain sensitive information displayed in the URL that could lead to further attacks against the system. IBM X-Force ID: 140688.

CPENameOperatorVersion
sterling_file_gatewayge2.2.0
sterling_file_gatewayle2.2.6

CPE	Name	Operator	Version
	sterling_file_gateway	ge	2.2.0
	sterling_file_gateway	le	2.2.6

References

www.ibm.com/support/docview.wss?uid=ibm10716997

www.securityfocus.com/bid/104885

exchange.xforce.ibmcloud.com/vulnerabilities/140688