Remote Information Disclosure in IBM Sterling File Gateway by IBM
CVE-2020-4476

5.3MEDIUM

Key Information:

Vendor: IBM
Status: Sterling File Gateway
Vendor: CVE Published:; 16 November 2020

Summary

The vulnerability in IBM Sterling File Gateway allows remote attackers to gain access to sensitive information through detailed technical error messages that are returned by the application. This flaw affects versions 2.2.0.0 to 2.2.6.5 and 6.0.0.0 to 6.0.3.2. The disclosed information can potentially be leveraged to launch further attacks against the affected systems.

Affected Version(s)

Sterling File Gateway 2.2.0.0

Sterling File Gateway 6.0.3.2

Sterling File Gateway 2.2.6.5

References

https://www.ibm.com/support/pages/node/6367971

x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/181778

vdb-entryx_refsource_XF

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Nov 16, 2020
Vulnerability Reserved
Dec 30, 2019