IBM Sterling File Gateway
cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*
- >= 6.0.0.0, <= 6.1.2.6
- >= 6.2.0.0, <= 6.2.0.3
An information disclosure vulnerability has been identified in the IBM Sterling File Gateway UI versions 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3. This vulnerability could reveal the server's installation path, potentially facilitating further attacks against the system.
Exploitation of this vulnerability could lead to unauthorized information disclosure, specifically the server's installation path, which could be used to plan additional attacks against the system.
Users can upgrade to IBM Sterling File Gateway versions 6.1.2.7 or 6.2.0.4. The version 6.1.2.7 is available on IBM Fix Central, while the container version can be found in the IBM Entitled Registry.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.