Security Bulletin: Information Disclosure Vulnerabilities Affect IBM Sterling File Gateway (CVE-2019-4423, CVE-2019-4280)

Summary IBM Sterling File Gateway has addressed the information disclosure vulnerabilities Vulnerability Details CVEID: CVE-2019-4423 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request...

CVE-2019-4423

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 162769...

CVE-2019-4423

CVE-2019-4423 affects IBM Sterling File Gateway versions 2.2.0.0–6.0.1.0. The IBM Security Bulletin details a directory-traversal vulnerability exploited by specially crafted URLs containing “dot dot” (/../) to view arbitrary files. The affected product is IBM Sterling File Gateway; root cause is...