Security Bulletin: Access Control Security Vulnerability Affects IBM Sterling File Gateway (CVE-2017-1550)

Summary IBM Sterling File Gateway could allow an authenticated user to change other user's passwords. Vulnerability Details CVEID: CVE-2017-1550 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated user to change other user's passwords. CVSS Base Score: 6.5 CVSS Temporal Score: See...

CVE-2017-1550

Affected product: IBM Sterling File Gateway 2.2. Vulnerability: authenticated users could change other users’ passwords due to an access control/security vulnerability. Impact: enables privilege misuse within the product’s user management. References from connected docs: IBM Security Bulletin for...