Code injection

IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626...

Design/Logic Flaw

IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695...

CVE-2017-1497

CVE-2017-1497 affects IBM Sterling File Gateway 2.2. The issue could allow an unauthorized user to view files they should not have access to by knowing the file’s directory location, indicating an information-disclosure vulnerability. According to IBM, remediation is to apply the B2B Integrator f...

CVE-2017-1487

IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626...

CVE-2017-1497

IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695...

CVE-2017-1487

CVE-2017-1487 – IBM Sterling File Gateway 2.2 is vulnerable to an information-disclosure flaw where an authenticated attacker could obtain sensitive data such as login IDs. The IBM Security Bulletin (IBM Sterling File Gateway 2.2) specifies CVSS v3.0: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N with a ba...

PT-2017-13790

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway version 2.2 Description The issue allows an unauthorized user to view files they should not have access to, provided they know the directory location of the file. Recommendations For IBM Sterling File Gateway version...

IBM Sterling File Gateway Cross-Site Scripting Vulnerability

IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. A cross-site scripting vulnerability exists in IBM Sterling...

CVE-2017-1497: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695...

CVE-2017-1487: Exposure of Sensitive Information to an Unauthorized Actor

IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626...

PT-2017-13737

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway version 2.2 Description The issue allows an authenticated attacker to obtain sensitive information, including login ids, on the system. Recommendations For IBM Sterling File Gateway version 2.2, at the moment, there i...

Xxe

XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...

CVE-2015-0194

XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...

CVE-2015-0194

CVE-2015-0194 affects IBM Sterling B2B Integrator (versions 5.1 and 5.2) and IBM Sterling File Gateway (versions 2.1 and 2.2). The underlying issue is an XML External Entity (XXE) processing vulnerability in these products’ XML handling, allowing a remote attacker to read arbitrary files by suppl...

PT-2017-6434

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 5.1 through 5.2 IBM Sterling File Gateway versions 2.1 through 2.2 Description The issue allows remote attackers to read arbitrary files via a crafted XML data, exploiting an XML External Entity XXE...

CVE-2015-0194: Improper Restriction of XML External Entity Reference

XML External Entity XXE vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data...

CVE-2017-1326

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060...

Code injection

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060...

CVE-2017-1326

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060...

CVE-2017-1326

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060...