Lucene search
IbmCVELIST:CVE-2021-20473HistoryOct 07, 2021 - 6:05 p.m.
CVE-2021-20473
2021-10-0718:05:48
ibm
www.cve.org
5
ibm
sterling file gateway
session vulnerability
authenticated user
impersonate
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
19.6%
IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 196944.
CNA Affected
[
{
"product": "Sterling File Gateway",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "2.2.0.0"
},
{
"status": "affected",
"version": "6.0.0.0"
},
{
"status": "affected",
"version": "5.2.6.5_3"
},
{
"status": "affected",
"version": "6.0.3.4"
},
{
"status": "affected",
"version": "6.1.0.0"
},
{
"status": "affected",
"version": "6.1.0.1"
}
]
}
]Related
ibm
ibm
cnvd
cnvd
IBM Sterling File Gateway code issue vulnerability
2021-10-09 00:00:00
prion
prion
Code injection
2021-10-07 18:15:00
nvd
nvd
CVE-2021-20473
2021-10-07 18:15:07
cve
cve
CVE-2021-20473
2021-10-07 18:15:07
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
19.6%
Related for CVELIST:CVE-2021-20473