CVE-2021-39086

published 2022-08-16

CVE-2021-39086: IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obtain sensitive…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 215889.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
ibm	sterling_file_gateway	—	—
ibm	sterling_file_gateway	—	—
ibm	sterling_file_gateway	—	—
ibm	sterling_file_gateway	—	—
ibm	sterling_file_gateway	—	—
ibm	sterling_file_gateway	—	—
ibm	sterling_file_gateway	>= 6.0.0.0 < 6.0.3.6	6.0.3.6
ibm	sterling_file_gateway	>= 6.1.0.0 < 6.1.0.5	6.1.0.5
ibm	sterling_file_gateway	>= 6.1.1.0 < 6.1.1.2	6.1.1.2

CWE-209