CVE Vulnerabilities

CVE-2025-2827

Exposure of Information Through Directory Listing

Published: Jul 08, 2025 | Modified: Aug 02, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM Sterling File Gateway

6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4

could disclose sensitive installation directory information to an authenticated user that could be used in further attacks against the system.

Weakness

A directory listing is inappropriately exposed, yielding potentially sensitive information to attackers.

Affected Software

Name Vendor Start Version End Version
Sterling_file_gateway Ibm 6.0.0.0 (including) 6.1.2.7_1 (excluding)
Sterling_file_gateway Ibm 6.2.0.0 (including) 6.2.0.5 (excluding)

Potential Mitigations

References