IBM Sterling File Gateway Information Disclosure Vulnerability

An information disclosure vulnerability has been identified in IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4. This vulnerability could allow an authenticated user to access sensitive installation directory information, which could be leveraged for further attacks against the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive directory information, potentially facilitating additional attacks on the system.

Remediation

Users can upgrade to IBM Sterling File Gateway versions 6.1.2.7_1, 6.2.0.5, or 6.2.1.0. The IIM versions of these releases are available on Fix Central, while the container versions can be found in the IBM Entitled Registry.