Lucene search
IBM11D414D0ADFCB7E024051886B779B3F34A8BA2C3787235A2302E0A1E30FD16AAHistoryJan 29, 2021 - 7:24 p.m.
Security Bulletin: Cross-Site Scripting vulnerability affects IBM Sterling File Gateway (CVE-2020-4658)
2021-01-2919:24:20
www.ibm.com
13
ibm sterling file gateway
xss vulnerability
cross-site scripting
ibm sterling b2b integrator
credentials disclosure
EPSS
0.001
Percentile
29.7%
Summary
IBM Sterling File Gateway has addressed a XSS vulnerability.
Vulnerability Details
CVEID:CVE-2020-4658
**DESCRIPTION:**IBM Sterling File Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Base score: 6.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/186095 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Sterling File Gateway | 2.2.0.0 - 6.0.3.2 |
Remediation/Fixes
| Product & Version | ** Remediation & Fix** |
|---|---|
| 2.2.0.0 - 6.0.3.2 | Apply IBM Sterling B2B Integrator version 6.0.3.3 or 6.1.0.0 on Fix Central |
Workarounds and Mitigations
None
Related
prion
prion
Cross site scripting
2020-12-16 21:15:00
cvelist
cvelist
CVE-2020-4658
2020-12-16 20:35:26
cve
cve
CVE-2020-4658
2020-12-16 21:15:13
nvd
nvd
CVE-2020-4658
2020-12-16 21:15:13
EPSS
0.001
Percentile
29.7%
Related for 11D414D0ADFCB7E024051886B779B3F34A8BA2C3787235A2302E0A1E30FD16AA