777 matches found
CVE-2020-4259
IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the cookie to access functionality not authorized to. IBM X-Force ID: 175638...
Startup issues for both IBM Sterling B2B Integrator and IBM Sterling File Gateway caused by Microsoft® Windows Patch KB2992611 for Microsoft® Security Bulletin MS14-066
Abstract Applying Windows Patch KB2992611 for Microsoft® Security Bulletin MS14-066 could prevent startup of both IBM Sterling B2B Integrator and IBM Sterling File Gateway. Content IBM Support has received several production down calls from IBM Sterling B2B Integrator and IBM Sterling File Gatewa...
Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are affected by vulnerabilities in OpenSSL Libraries version 1.0.1 (CVE-2013-4353, CVE-2013-6450, CVE-2013-6449)
Summary Security vulnerabilities have been discovered in the OpenSSL libraries used by IBM Sterling B2B Integrator and IBM Sterling File Gateway. Vulnerability Details SWIFTNet adapters of IBM Sterling B2B Integrator and IBM Sterling File Gateway use OpenSSL libraries for cryptography, and thus a...
Security Bulletin: Jetty vulnerabilities found in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2011-4461, CVS-2009-4612, CVE-2009-4611, CVE-2009-4610, CVS-2009-4609, CVE-2009-1524, CVE-2009-1523)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway use Jetty version 6.1.8. and thus are affected by the following security vulnerabilities discovered in the Jetty version 6.1.8 Vulnerability Details CVEID: CVE-2011-4461 DESCRIPTION: Mort Bay Jetty 6.1.8 computes hash values for fo...
Security Bulletin: Vulnerabilities found in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2014-0114, CVE-2014-0927, CVE-2014-0912)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway are affected by multiple security vulnerabilities. These vulnerabilities include: - Open Source Apache Struts V1 ClassLoader manipulation vulnerability - Improper Access Control - Information Disclosure Vulnerability Details...
Security Bulletin: Vulnerability exists in Apache-Xalan-Java used in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2014-0107)
Summary A security bypass vulnerability has been discovered in Apache Xalan-Java libraries used by IBM Sterling B2B Integrator and IBM Sterling File Gateway. Vulnerability Details CVEID: CVE-2014-0107 Description: Apache Xalan-Java could allow a remote attacker to bypass security restrictions...
Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling File Gateway (CVE-2017-1487)
Summary IBM Sterling File Gateway could allow an authenticated attacker to obtain sensitive information such as login ids on the system. Vulnerability Details CVEID: CVE-2017-1487 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated attacker to obtain sensitive information such as...
Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling File Gateway (CVE-2017-1548, CVE-2017-1497)
Summary IBM Sterling File Gateway could allow a remote to view files on the system Vulnerability Details CVEID: CVE-2017-1548 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containi...
Security Bulletin: Information Disclosure Security Vulnerability Affects IBM Sterling File Gateway (CVE-2018-1470, CVE-2017-1544, CVE-2017-1575)
Summary Information disclosure security vulnerability affects IBM Sterling Filegateway. Vulnerability Details CVEID: CVE-2018-1470 DESCRIPTION: IBM Sterling File Gateway could allow a remote authenticated attacker to obtain sensitive information displayed in the URL that could lead to further...
Security Bulletin: Cross-site Scripting Security Vulnerability Affects IBM Sterling File Gateway (CVE-2017-1549)
Summary IBM Sterling File Gateway is vulnerable to cross-site scripting Vulnerability Details CVEID: CVE-2017-1549 DESCRIPTION: IBM Sterling File Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...
Security Bulletin: Access Control Security Vulnerability Affects IBM Sterling File Gateway (CVE-2017-1550)
Summary IBM Sterling File Gateway could allow an authenticated user to change other user's passwords. Vulnerability Details CVEID: CVE-2017-1550 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated user to change other user's passwords. CVSS Base Score: 6.5 CVSS Temporal Score: See...
Security Bulletin: IBM Sterling File Gateway is Vulnerable to Cross-site Scripting (CVE-2017-1632)
Summary IBM Sterling File Gateway is vulnerable to cross-site scripting Vulnerability Details CVEID: CVE-2017-1632 DESCRIPTION: IBM Sterling File Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...
Security Bulletin: Information Disclosure Vulnerabilities Affect IBM Sterling File Gateway (CVE-2019-4423, CVE-2019-4280)
Summary IBM Sterling File Gateway has addressed the information disclosure vulnerabilities Vulnerability Details CVEID: CVE-2019-4423 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request...
Security Bulletin: File Access Vulnerability Affects IBM Sterling File Gateway (CVE-2018-1398)
Summary IBM Sterling File Gateway could allow a remote attacker to download certain files that could contain sensitive information Vulnerability Details CVEID: CVE-2018-1398 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to download certain files that could contain sensitive...
Security Bulletin: SQL Injection Vulnerability Affects IBM Sterling File Gateway (CVE-2019-4147)
Summary IBM Sterling File Gateway has addressed the information disclosure vulnerability Vulnerability Details CVEID: CVE-2019-4147 DESCRIPTION: IBM Sterling File Gateway is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker ...
Security Bulletin: Multiple Apache Struts Vulnerabilities Affect IBM Sterling File Gateway
Summary IBM Sterling File Gateway has addressed the following vulnerabilities caused by Apach Struts 1.1 Vulnerability Details CVEID: CVE-2008-2025 DESCRIPTION: Apache Struts is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could explo...
Security Bulletin: Vulnerability in MD5 Signature and Hash Algorithm affects Sterling Integrator and Sterling File Gateway (CVE-2015-7575)
Summary The MD5 “SLOTH” vulnerability on TLS 1.2 affects Sterling Integrator and Sterling File Gateway. Vulnerability Details CVEID: CVE-2015-7575 DESCRIPTION: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a...
CVE-2019-4423
IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 162769...
CVE-2019-4423
IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 162769...