cbcvebase.
CVE-2020-4654
published 2021-10-08

CVE-2020-4654: IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information due to improper permission control. IBM…

PriorityP433medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.71%
49.3th percentile
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information due to improper permission control. IBM X-Force ID: 186090.

Affected

9 ranges
VendorProductVersion rangeFixed in
ibmsterling_file_gateway——
ibmsterling_file_gateway——
ibmsterling_file_gateway——
ibmsterling_file_gateway——
ibmsterling_file_gateway——
ibmsterling_file_gateway——
ibmsterling_file_gateway>= 2.2.0.0 < 5.2.6.5_45.2.6.5_4
ibmsterling_file_gateway>= 6.0.0.0 < 6.0.3.56.0.3.5
ibmsterling_file_gateway>= 6.1.0.0 < 6.1.0.26.1.0.2

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv3.03.1LOWCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.