Security Bulletin: SQL Injection Vulnerability Affects IBM Sterling File Gateway (CVE-2019-4147)

Summary IBM Sterling File Gateway has addressed the information disclosure vulnerability Vulnerability Details CVEID: CVE-2019-4147 DESCRIPTION: IBM Sterling File Gateway is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker ...

CVE-2019-4147

The CVE-2019-4147 entry concerns IBM Sterling File Gateway. The vulnerability is an SQL injection in IBM Sterling File Gateway versions 2.2.0.0 through 6.0.1.0, allowing a remote attacker to view, add, modify, or delete data in the back-end database. IBM’s security bulletin confirms the issue and...