800 matches found
CVE-2017-1548
IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 131288...
Code injection
IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords. IBM X-Force ID: 131290...
Design/Logic Flaw
IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 131288...
CVE-2017-1632
IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133178...
CVE-2017-1550
IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords. IBM X-Force ID: 131290...
CVE-2017-1632
IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133178...
CVE-2017-1550
IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords. IBM X-Force ID: 131290...
CVE-2017-1549
IBM Sterling File Gateway 2.2 is affected by a Cross-Site Scripting (XSS) vulnerability in the Web UI that could allow an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The issue is documented as CVE-2017-1549. A remediation is available: ap...
CVE-2017-1548
CVE-2017-1548 affects IBM Sterling File Gateway 2.2. A remote attacker could trigger directory traversal by sending a crafted URL containing ".." sequences (e.g., /../) to view arbitrary files on the system. IBM’s bulletin confirms the vulnerability and lists remediation: apply the B2B Integrator...
CVE-2017-1632
IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133178...
CVE-2017-1550
IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords. IBM X-Force ID: 131290...
CVE-2017-1549
IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131289...
CVE-2017-1632
IBM Sterling File Gateway 2.2 is vulnerable to Cross‑Site Scripting (CVE-2017-1632). The vulnerability allows injection of arbitrary JavaScript into the Web UI, potentially leading to credentials disclosure within a trusted session. Affected product/version: IBM Sterling File Gateway 2.2. Remedia...
CVE-2017-1548
IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 131288...
CVE-2017-1550
Affected product: IBM Sterling File Gateway 2.2. Vulnerability: authenticated users could change other users’ passwords due to an access control/security vulnerability. Impact: enables privilege misuse within the product’s user management. References from connected docs: IBM Security Bulletin for...
IBM Sterling File Gateway Information Disclosure Vulnerability (CNVD-2018-00850)
IBM Sterling File Gateway consolidates different centers of activity for file transfers and helps enable the secure exchange of file-based data over the Internet. An information disclosure vulnerability exists in IBM Sterling File Gateway. An attacker could exploit the vulnerability to gain...
CVE-2017-1487
IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626...
CVE-2017-1497
IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695...