Cross-Site Request Forgery Vulnerability in IBM Sterling File Gateway
CVE-2021-20489

4.3MEDIUM

Key Information:

Vendor

IBM
Status
Sterling File Gateway
Vendor
CVE Published:
7 October 2021

What is CVE-2021-20489?

The IBM Sterling File Gateway is susceptible to Cross-Site Request Forgery (CSRF), which could permit an attacker to perform unauthorized actions on behalf of a legitimate user. This vulnerability affects versions 2.2.0.0 through 6.1.1.0, potentially enabling attackers to exploit trusted relationships to manipulate user interactions covertly. For further detail, consult IBM's official support documentation.

Affected Version(s)

Sterling File Gateway 2.2.0.0

Sterling File Gateway 6.0.1.0

Sterling File Gateway 6.0.0.0

References

https://www.ibm.com/support/pages/node/6496777
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/197790
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.