CVE-2023-47159

IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2025-01-27

Last modified

2025-01-27

Weaknesses

CWE-203, CWE-204

Affected products

• Sterling File Gateway (Ibm)

References

• https://www.ibm.com/support/pages/node/7176083