IBM Sterling File Gateway Information Disclosure Vulnerability

Vulnerability

An information disclosure vulnerability has been identified in the IBM Sterling File Gateway UI versions 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3. This vulnerability could reveal the server's installation path, potentially facilitating further attacks against the system.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, specifically the server's installation path, which could be used to plan additional attacks against the system.

Remediation

Users can upgrade to IBM Sterling File Gateway versions 6.1.2.7 or 6.2.0.4. The version 6.1.2.7 is available on IBM Fix Central, while the container version can be found in the IBM Entitled Registry.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
2.2
impact
2.5
exploitability
7.6
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.