CVE-2024-22316CWE-863

IBM Sterling File Gateway improper access control

Medium · published January 27, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to perform unauthorized actions to another user's data due to improper access controls.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-01-27T16:03Z
EPSS history
Timeline
  • 27 JAN 16:03Z
    IBM Sterling File Gateway improper access control
    cvelistv5