Security Bulletin: Multiple Apache Struts Vulnerabilities Affect IBM Sterling File Gateway

Summary IBM Sterling File Gateway has addressed the following vulnerabilities caused by Apach Struts 1.1 Vulnerability Details CVEID: CVE-2008-2025 DESCRIPTION: Apache Struts is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could explo...

Security Bulletin: Cross-site Scripting Security Vulnerability Affects IBM Sterling File Gateway (CVE-2017-1549)

Summary IBM Sterling File Gateway is vulnerable to cross-site scripting Vulnerability Details CVEID: CVE-2017-1549 DESCRIPTION: IBM Sterling File Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...

Security Bulletin: Information Disclosure Security Vulnerability Affects IBM Sterling File Gateway (CVE-2018-1470, CVE-2017-1544, CVE-2017-1575)

Summary Information disclosure security vulnerability affects IBM Sterling Filegateway. Vulnerability Details CVEID: CVE-2018-1470 DESCRIPTION: IBM Sterling File Gateway could allow a remote authenticated attacker to obtain sensitive information displayed in the URL that could lead to further...

Security Bulletin: File Access Vulnerability Affects IBM Sterling File Gateway (CVE-2018-1398)

Summary IBM Sterling File Gateway could allow a remote attacker to download certain files that could contain sensitive information Vulnerability Details CVEID: CVE-2018-1398 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to download certain files that could contain sensitive...

Security Bulletin: Access Control Security Vulnerability Affects IBM Sterling File Gateway (CVE-2017-1550)

Summary IBM Sterling File Gateway could allow an authenticated user to change other user's passwords. Vulnerability Details CVEID: CVE-2017-1550 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated user to change other user's passwords. CVSS Base Score: 6.5 CVSS Temporal Score: See...

Security Bulletin: Information Disclosure Vulnerability Affects IBM Sterling File Gateway (CVE-2017-1487)

Summary IBM Sterling File Gateway could allow an authenticated attacker to obtain sensitive information such as login ids on the system. Vulnerability Details CVEID: CVE-2017-1487 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated attacker to obtain sensitive information such as...

Security Bulletin: SQL Injection Vulnerability Affects IBM Sterling File Gateway (CVE-2019-4147)

Summary IBM Sterling File Gateway has addressed the information disclosure vulnerability Vulnerability Details CVEID: CVE-2019-4147 DESCRIPTION: IBM Sterling File Gateway is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker ...

Security Bulletin: Vulnerability in MD5 Signature and Hash Algorithm affects Sterling Integrator and Sterling File Gateway (CVE-2015-7575)

Summary The MD5 “SLOTH” vulnerability on TLS 1.2 affects Sterling Integrator and Sterling File Gateway. Vulnerability Details CVEID: CVE-2015-7575 DESCRIPTION: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a...

CVE-2019-4280

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests which could be used in further attacks against the system. IBM X-Force ID: 160503...

CVE-2019-4280

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests which could be used in further attacks against the system. IBM X-Force ID: 160503...

CVE-2019-4423

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 162769...

CVE-2019-4423

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 162769...

Information disclosure

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests which could be used in further attacks against the system. IBM X-Force ID: 160503...

Design/Logic Flaw

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 162769...

CVE-2019-4423

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 162769...

CVE-2019-4423

CVE-2019-4423 affects IBM Sterling File Gateway versions 2.2.0.0–6.0.1.0. The IBM Security Bulletin details a directory-traversal vulnerability exploited by specially crafted URLs containing “dot dot” (/../) to view arbitrary files. The affected product is IBM Sterling File Gateway; root cause is...

CVE-2019-4280

IBM Sterling File Gateway (versions 2.2.0.0–6.0.1.0) has an information-disclosure vulnerability (CVE-2019-4280) where sensitive data is exposed in HTTP requests due to how the product handles requests in IBM Sterling B2B Integrator Standard Edition. Potential impact is information exposure that ...

CVE-2019-4280

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests which could be used in further attacks against the system. IBM X-Force ID: 160503...

IBM Sterling File Gateway Information Disclosure Vulnerability (CNVD-2019-34605)

IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. An information disclosure vulnerability exists in IBM Sterlin...

IBM Sterling File Gateway Path Traversal Vulnerability

IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. A path traversal vulnerability exists in IBM Sterling File...