CVE-2017-1549

IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131289...

CVE-2017-1550

IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords. IBM X-Force ID: 131290...

CVE-2017-1632

IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133178...

CVE-2017-1549

IBM Sterling File Gateway 2.2 is affected by a Cross-Site Scripting (XSS) vulnerability in the Web UI that could allow an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The issue is documented as CVE-2017-1549. A remediation is available: ap...

CVE-2017-1550

Affected product: IBM Sterling File Gateway 2.2. Vulnerability: authenticated users could change other users’ passwords due to an access control/security vulnerability. Impact: enables privilege misuse within the product’s user management. References from connected docs: IBM Security Bulletin for...

CVE-2017-1632

IBM Sterling File Gateway 2.2 is vulnerable to Cross‑Site Scripting (CVE-2017-1632). The vulnerability allows injection of arbitrary JavaScript into the Web UI, potentially leading to credentials disclosure within a trusted session. Affected product/version: IBM Sterling File Gateway 2.2. Remedia...

CVE-2017-1548

CVE-2017-1548 affects IBM Sterling File Gateway 2.2. A remote attacker could trigger directory traversal by sending a crafted URL containing ".." sequences (e.g., /../) to view arbitrary files on the system. IBM’s bulletin confirms the vulnerability and lists remediation: apply the B2B Integrator...

IBM Sterling File Gateway Information Disclosure Vulnerability (CNVD-2018-00850)

IBM Sterling File Gateway consolidates different centers of activity for file transfers and helps enable the secure exchange of file-based data over the Internet. An information disclosure vulnerability exists in IBM Sterling File Gateway. An attacker could exploit the vulnerability to gain...

PT-2017-14075

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway version 2.2 Description The issue allows a remote attacker to traverse directories on the system by sending a specially-crafted URL request containing dot dot sequences ../ to view arbitrary files on the system...

CVE-2017-1632: Improper Neutralization of Input During Web Page Generation

IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133178...

CVE-2017-1549: Improper Neutralization of Input During Web Page Generation

IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131289...

PT-2017-14077

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway version 2.2 Description The issue allows an authenticated user to change other users' passwords. Recommendations For IBM Sterling File Gateway version 2.2, update to a version that includes a fix for this issue, as...

PT-2017-14076

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway version 2.2 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2017-14368

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway version 2.2 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

CVE-2017-1550: Undefined Security Weakness

IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords. IBM X-Force ID: 131290...

CVE-2017-1548: Improper Limitation of a Pathname to a Restricted Directory

IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 131288...

CVE-2017-1497

IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695...

CVE-2017-1487

IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626...

CVE-2017-1497

IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695...

CVE-2017-1487

IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626...