Improper Permission Control in IBM Sterling File Gateway
CVE-2020-4654

3.1LOW

Key Information:

Vendor

IBM
Status
Sterling File Gateway
Vendor
CVE Published:
8 October 2021

What is CVE-2020-4654?

IBM Sterling File Gateway versions 2.2.0.0 through 6.1.1.0 has a vulnerability that allows an authenticated user to gain unauthorized access to sensitive information. This issue arises from improper permission control within the application, potentially compromising user data and exposing it to unauthorized users.

Affected Version(s)

Sterling File Gateway 2.2.0.0

Sterling File Gateway 6.0.0.0

Sterling File Gateway 5.2.6.5_3

References

https://www.ibm.com/support/pages/node/6497245
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/186090
vdb-entryx_refsource_XF

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.