CVE-2024-47109 — Insufficiently Protected Credentials in IBM Sterling File Gateway

CWE-522 — Insufficiently Protected Credentials3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.1%
top 76.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Sterling File Gateway
Timeline
PublishedMar 10

Description

IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 UI could disclosure the installation path of the server which could aid in further attacks against the system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶NVDibm/sterling_file_gateway6.0.0.0 — 6.1.2.7+1
▶CVEListV5ibm/sterling_file_gateway6.0.0.0 — 6.1.2.6+1

🔴Vulnerability Details

2
GHSA
GHSA-cjhm-452j-46h2: IBM Sterling File Gateway 6↗2025-03-10
▶
CVEList
IBM Sterling File Gateway information disclosure↗2025-03-10
▶
CVE-2024-47109 — Insufficiently Protected Credentials | cvebase