CVE-2017-1632: XSS

Published Dec 11, 2017

Updated

IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133178.

Affected Software

1 affected component

IBM Sterling File Gateway=2.2

Event History

Dec 11, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for IBM Sterling File Gateway?

The vulnerability ID for IBM Sterling File Gateway is CVE-2017-1632.

What is the severity of CVE-2017-1632?

The severity of CVE-2017-1632 is medium with a score of 5.4.

What is the impact of CVE-2017-1632 on IBM Sterling File Gateway?

CVE-2017-1632 allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.

How can I fix CVE-2017-1632 in IBM Sterling File Gateway 2.2?

To fix CVE-2017-1632 in IBM Sterling File Gateway 2.2, apply the necessary security patches provided by IBM.

Where can I find more information about CVE-2017-1632?

You can find more information about CVE-2017-1632 at the following references: - [IBM Support](http://www.ibm.com/support/docview.wss?uid=swg22010549) - [SecurityFocus](http://www.securityfocus.com/bid/102191) - [IBM X-Force](https://exchange.xforce.ibmcloud.com/vulnerabilities/133178)