CVE-2024-22316

MEDIUM

IBM Sterling File Gateway <6.1.2.5, <6.2.0.1 - Privilege Escalation

Title source: llm
STIX 2.1

Description

IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to perform unauthorized actions to another user's data due to improper access controls.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory
https://www.ibm.com/support/pages/node/7176083

Scores

CVSS v3 4.3
EPSS 0.0009
EPSS Percentile 25.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-863
Status published
Products (1)
ibm/sterling_file_gateway 6.0.0.0 - 6.1.2.5
Published Jan 27, 2025
Tracked Since Feb 18, 2026