CVE-2017-1548

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-12-11 · updated 2026-06-17
Weakness: CWE-22

Description

IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 131288.

Affected products

IBM Sterling File Gateway: 2.2

References

http://www.ibm.com/support/docview.wss?uid=swg22010738
http://www.securityfocus.com/bid/102187
https://exchange.xforce.ibmcloud.com/vulnerabilities/131288
http://www.ibm.com/support/docview.wss?uid=swg22010738
http://www.securityfocus.com/bid/102187
https://exchange.xforce.ibmcloud.com/vulnerabilities/131288

Get alerted when CVE-2017-1548 or the next vulnerability affects your stack