CVE-2025-2827

IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 could disclose sensitive installation directory information to an authenticated user that could be used in further attacks against the system.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - psirt@us.ibm.com

Published

2025-07-08

Last modified

2025-08-24

Weaknesses

CWE-548

Affected products

• Sterling File Gateway (Ibm)

References

• https://www.ibm.com/support/pages/node/7239094