CVE-2017-1497

LOW

IBM Sterling File Gateway 2.2 - Unauthorized File Access via Directory Path

Title source: llm

Description

IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695.

References (3)

Core 3

Core References

Issue Tracking, Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=swg22010738

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/102187

Issue Tracking, VDB Entry, Vendor Advisory x_refsource_misc

https://exchange.xforce.ibmcloud.com/vulnerabilities/128695

Scores

CVSS v3 3.7

EPSS 0.0104

EPSS Percentile 59.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (2)

IBM/Sterling File Gateway 2.2

ibm/sterling_file_gateway 2.2

Published Dec 07, 2017

Tracked Since Feb 18, 2026