CVE-2023-47159

MEDIUM

IBM Sterling File Gateway < 6.1.2.5 - Information Disclosure

Title source: rule

Description

IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses.

References (1)

[Vendor Advisory] https://www.ibm.com/support/pages/node/7176083

Scores

CVSS v3 4.3

EPSS 0.0010

EPSS Percentile 27.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-204 CWE-203

Status published

Products (1)

ibm/sterling_file_gateway 6.0.0.0 - 6.1.2.5

Published Jan 27, 2025

Tracked Since Feb 18, 2026