Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling File Gateway (CVE-2017-1548, CVE-2017-1497)

Summary IBM Sterling File Gateway could allow a remote to view files on the system Vulnerability Details CVEID: CVE-2017-1548 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containi...

CVE-2017-1497

CVE-2017-1497 affects IBM Sterling File Gateway 2.2. The issue could allow an unauthorized user to view files they should not have access to by knowing the file’s directory location, indicating an information-disclosure vulnerability. According to IBM, remediation is to apply the B2B Integrator f...