IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568.
| Software | From | Fixed in |
|---|---|---|
| ibm / sterling_b2b_integrator | 2.2.0.0 | 5.2.6.5_3.x |
| ibm / sterling_b2b_integrator | 6.1.0.0 | 6.1.0.1.x |
| ibm / sterling_b2b_integrator | 6.0.0.0 | 6.0.3.4.x |