CVE-2019-4423

published 2019-09-30

CVE-2019-4423: IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162769.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
ibm	sterling_file_gateway	—	—
ibm	sterling_file_gateway	—	—
ibm	sterling_file_gateway	2.2.0.0 – 6.0.1.0	—

CWE-22