CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2018-1398
https://notcve.org/view.php?id=CVE-2018-1398
IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote attacker to download certain files that could contain sensitive information. IBM X-Force ID: 138434. IBM Sterling File Gateway desde la versión 2.2.0 hasta la 2.2.6 podría permitir que un atacante remoto descargue ciertos archivos que podrían contener información sensible. IBM X-Force ID: 138434. • http://www.ibm.com/support/docview.wss?uid=ibm10717025 http://www.securityfocus.com/bid/104919 https://exchange.xforce.ibmcloud.com/vulnerabilities/138434 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2018-1470
https://notcve.org/view.php?id=CVE-2018-1470
IBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote authenticated attacker to obtain sensitive information displayed in the URL that could lead to further attacks against the system. IBM X-Force ID: 140688. IBM Sterling File Gateway, desde la versión 2.2.0 hasta la 2.2.6 podría permitir que un atacante autenticado remoto obtenga información sensible mostrada en la URL que podría conducir a más ataques contra el sistema. IBM X-Force ID: 140688. • http://www.ibm.com/support/docview.wss?uid=ibm10716997 http://www.securityfocus.com/bid/104885 https://exchange.xforce.ibmcloud.com/vulnerabilities/140688 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •