PT-2017-13790 · Ibm · Ibm Sterling File Gateway

Publicado 2017-12-07 · Atualizado 2017-12-18 · CVE-2017-1497

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway version 2.2

Description The issue allows an unauthorized user to view files they should not have access to, provided they know the directory location of the file.

Recommendations For IBM Sterling File Gateway version 2.2, consider restricting access to sensitive directories and files to minimize the risk of unauthorized access until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-1497

Produtos afetados

Ibm Sterling File Gateway

Referências · 5

• http://ibm.com/support/docview.wss?uid=swg22010738 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1497 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128695 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-1497 · Aviso do Fabricante
• http://securityfocus.com/bid/102187 · Nota