Information Disclosure in IBM Sterling File Gateway
CVE-2021-39086

4.3MEDIUM

Key Information:

Vendor
IBM
Status
Sterling File Gateway
Vendor
CVE Published:
16 August 2022

Summary

IBM Sterling File Gateway versions 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 are susceptible to an information disclosure issue. This occurs when detailed technical error messages are displayed in the browser, which may inadvertently divulge sensitive information. This exposed information could be exploited by remote attackers to execute further attacks targeting the system, enhancing their chances of compromising the security of the environment. For further details, refer to IBM’s official announcement and X-Force ID: 215889.

Affected Version(s)

Sterling File Gateway 6.0.0.0

Sterling File Gateway 6.1.0.0

Sterling File Gateway 6.1.1.0

References

https://www.ibm.com/support/pages/node/6612537
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/215889
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.