CVEvulnerability
CVE-2021-20473
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-10-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- CVSS 3.0 ([email protected])
- 6.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-613
Description
IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 196944.
Affected configurations
• ibm sterling file gateway (>= 2.2.0.0 <= 5.2.6.5 3)
• ibm sterling file gateway (>= 6.0.0.0 <= 6.0.3.4)
• ibm sterling file gateway (>= 6.1.0.0 <= 6.1.0.1)
Related
Weakness · not in database (1)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/196944 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6496785 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/196944 VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6496785 Patch, Vendor Advisory