PT-2018-12671 · Ibm · Ibm Sterling File Gateway

Publicado 2018-07-20 · Atualizado 2019-10-09 · CVE-2018-1470

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway versions 2.2.0 through 2.2.6

Description The issue allows a remote authenticated attacker to obtain sensitive information displayed in the URL, which could lead to further attacks against the system.

Recommendations For IBM Sterling File Gateway versions 2.2.0 through 2.2.6, update to a version that contains a fix for this issue to prevent a remote authenticated attacker from obtaining sensitive information.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-1470

Produtos afetados

Ibm Sterling File Gateway

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/140688 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=ibm10716997 · Aviso do Fabricante
• http://securityfocus.com/bid/104885 · Nota
• https://osv.dev/vulnerability/CVE-2018-1470 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1470 · Nota de Segurança