CVE-2017-1548

IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 131288...

CVE-2017-1632

IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133178...

CVE-2017-1550

Affected product: IBM Sterling File Gateway 2.2. Vulnerability: authenticated users could change other users’ passwords due to an access control/security vulnerability. Impact: enables privilege misuse within the product’s user management. References from connected docs: IBM Security Bulletin for...

IBM Sterling File Gateway Information Disclosure Vulnerability (CNVD-2018-00850)

IBM Sterling File Gateway consolidates different centers of activity for file transfers and helps enable the secure exchange of file-based data over the Internet. An information disclosure vulnerability exists in IBM Sterling File Gateway. An attacker could exploit the vulnerability to gain...

CVE-2017-1497

IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695...

CVE-2017-1487

IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626...

CVE-2017-1487

IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626...

CVE-2017-1497

IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695...

Code injection

IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626...

Design/Logic Flaw

IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695...

CVE-2017-1487

IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626...

CVE-2017-1497

CVE-2017-1497 affects IBM Sterling File Gateway 2.2. The issue could allow an unauthorized user to view files they should not have access to by knowing the file’s directory location, indicating an information-disclosure vulnerability. According to IBM, remediation is to apply the B2B Integrator f...

CVE-2017-1487

CVE-2017-1487 – IBM Sterling File Gateway 2.2 is vulnerable to an information-disclosure flaw where an authenticated attacker could obtain sensitive data such as login IDs. The IBM Security Bulletin (IBM Sterling File Gateway 2.2) specifies CVSS v3.0: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N with a ba...

CVE-2017-1497

IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695...

IBM Sterling File Gateway Cross-Site Scripting Vulnerability

IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. A cross-site scripting vulnerability exists in IBM Sterling...

CVE-2015-0194

XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...

Xxe

XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...

CVE-2015-0194

CVE-2015-0194 affects IBM Sterling B2B Integrator (versions 5.1 and 5.2) and IBM Sterling File Gateway (versions 2.1 and 2.2). The underlying issue is an XML External Entity (XXE) processing vulnerability in these products’ XML handling, allowing a remote attacker to read arbitrary files by suppl...

Code injection

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060...

CVE-2017-1326

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060...