CVE-2024-47109: IBM Sterling File Gateway information disclosure
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 UI could disclosure the installation path of the server which could aid in further attacks against the system.
Other sources
IBM Sterling File Gateway UI could disclosure the installation path of the server which could aid in further attacks against the system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47109?
CVE-2024-47109 has a medium severity level due to potential exposure of sensitive installation paths.
How do I fix CVE-2024-47109?
To fix CVE-2024-47109, update your IBM Sterling File Gateway to a version above 6.2.0.3 or apply any recommended patches from IBM.
What versions are affected by CVE-2024-47109?
CVE-2024-47109 affects IBM Sterling File Gateway versions from 6.0.0.0 to 6.1.2.6 and 6.2.0.0 to 6.2.0.3.
What are the potential risks associated with CVE-2024-47109?
The potential risks include unauthorized disclosure of the server's installation path, which can be exploited for further attacks.
Is CVE-2024-47109 being actively exploited?
There is currently no public indication that CVE-2024-47109 is being actively exploited, but it poses a risk if unaddressed.