← Back

CVE-2024-47109

nvd nist
Published: Mar 10, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: psirt@us.ibm.com (Secondary)

Description

IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 UI could disclosure the installation path of the server which could aid in further attacks against the system.

Affected (2)

Ibm
1 product
Sterling File Gateway
Configuration A
2 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Ibm
Sterling File Gateway
From 6.0.0.0 to 6.1.2.7
Sterling File Gateway
From 6.2.0.0 to 6.2.0.4
Running on/withPlatform Versions
Ibm
Aix
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-522
Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.