PT-2025-10600 · Ibm · Ibm Sterling File Gateway

Published 2024-09-18 · Updated 2025-03-10 · CVE-2024-47109

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.3

Description The issue allows the disclosure of the installation path of the server, which could aid in further attacks against the system.

Recommendations For versions 6.0.0.0 through 6.1.2.6, update to a version that fixes this issue. For versions 6.2.0.0 through 6.2.0.3, update to a version that fixes this issue.

Fix

Insufficiently Protected Credentials

Files Accessible to External Parties

Weakness Enumeration

CWE-522

CWE-552

Related Identifiers

BDU:2025-02570

CVE-2024-47109

Affected Products

Ibm Sterling File Gateway

References · 8

• https://osv.dev/vulnerability/CVE-2024-47109 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47109 · Security Note
• https://bdu.fstec.ru/vul/2025-02570 · Security Note
• https://ibm.com/support/pages/node/7185259 · Vendor Advisory, Patch
• https://t.me/cvedetector/19966 · Telegram Post
• https://vuldb.com/ru/?id.299088 · Note
• https://twitter.com/CVEnew/status/1899132433515041160 · Twitter Post
• https://t.me/cvetracker/18817 · Telegram Post