User Enumeration Vulnerability in IBM Sterling File Gateway

CVE-2021-20376

What is CVE-2021-20376?

An issue in IBM Sterling File Gateway versions 2.2.0.0 through 6.1.1.0 permits authenticated attackers to exploit discrepancies in message responses, enabling them to enumerate valid usernames. This vulnerability arises from varying feedback provided during user authentication attempts, which may reveal the existence of certain accounts within the system. Organizations utilizing affected versions are strongly encouraged to apply the latest security updates to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References