CVE-2024-22316: IBM Sterling File Gateway improper access control
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to perform unauthorized actions to another user's data due to improper access controls.
Other sources
IBM Sterling File Gateway could allow an authenticated user to perform unauthorized actions to another user's data due to improper access controls.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22316?
CVE-2024-22316 is classified as a medium severity vulnerability due to improper access controls in IBM Sterling File Gateway.
How do I fix CVE-2024-22316?
To fix CVE-2024-22316, you should upgrade IBM Sterling File Gateway to a patched version that resolves the access control issues.
Which versions of IBM Sterling File Gateway are affected by CVE-2024-22316?
CVE-2024-22316 affects IBM Sterling File Gateway versions from 6.0.0.0 to 6.1.2.5 and 6.2.0.0 to 6.2.0.1.
What types of actions can an authenticated user perform due to CVE-2024-22316?
An authenticated user could perform unauthorized actions on another user's data because of the improper access controls in place.
Is there a workaround for CVE-2024-22316 while waiting for the fix?
There is no specific workaround for CVE-2024-22316, and it is recommended to upgrade to avoid potential unauthorized access.