IBM Sterling File Gateway Username Enumeration Vulnerability

A vulnerability in IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 allows authenticated users to enumerate usernames. This issue arises from an observable discrepancy in request responses, which can be exploited to gather information about user accounts.

Impact

Exploitation of this vulnerability could lead to unauthorized username enumeration, allowing attackers to identify valid user accounts.

Remediation

Users can upgrade to IBM Sterling File Gateway versions 6.1.2.6 or 6.2.0.3. The IIM versions of these releases are available on Fix Central, while the container versions can be found in the IBM Entitled Registry.