777 matches found
CVE-2021-20376
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568...
CVE-2021-20376
CVE-2021-20376 affects IBM Sterling File Gateway. Documents confirm an authenticated attacker could enumerate usernames due to a discrepancy in returned messages. Affected versions span IBM Sterling File Gateway 2.2.0.0 to 6.1.1.0 (including 5.2.x and 6.0.x tracks). The root cause is a difference...
CVE-2021-20375
CVE-2021-20375 affects IBM Sterling File Gateway versions 2.2.0.0 through 6.1.1.0. The issue is improper access controls allowing an authenticated user to intercept and replace a message sent by another user. IBM’s remediation/patch guidance (per IBM Security Bulletin) provides fixes by product v...
CVE-2021-20375
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls. IBM X-Force ID: 195567...
CVE-2021-20372
CVE-2021-20372 affects IBM Sterling File Gateway (versions 2.2.0.0–6.1.1.0). The issue arises from insufficient permission checking, allowing a remote authenticated user to cause a denial of service for another user. Related entries (NVD, CNVD, CVE records) confirm a MEDIUM severity with CVSS v3....
CVE-2021-20372
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. IBM X-Force ID: 195518...
IBM Sterling File Gateway 安全漏洞
IBM Sterling File Gateway, an application for transferring files between internal and external partners, allows you to more securely and reliably transfer files with trading partners. an information disclosure vulnerability exists in IBM Sterling File Gateway version 2.2.0.0-6.1.1.0. The...
Security Bulletin: Access Control Vulnerability Affects IBM Sterlng File Gateway (CVE-2021-20372)
Summary IBM Sterling File Gateway has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-20372 DESCRIPTION: IBM Sterling File Gateway could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. CVSS Base...
Security Bulletin: Access Control Vulnerability Affects IBM Sterling File Gateway (CVE-2021-20376)
Summary IBM Sterling File Gateway has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-20376 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. CVSS Base...
Security Bulletin: Session Fixation Vulnerability Affects BM Sterling File Gateway (CVE-2021-20473)
Summary IBM Sterling File Gateway has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-20473 DESCRIPTION: IBM Sterling File Gateway User Interface does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system...
Security Bulletin: Cross-Site Scripting Vulnerability Affects IBM Sterling File Gateway (CVE-2021-20481)
Summary IBM Sterling File Gateway has addressed the security vulnerabilty. Vulnerability Details CVEID: CVE-2021-20481 DESCRIPTION: IBM Sterling File Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...
Security Bulletin: Cross-Site Request Forgery Vulnerability Affects IBM Sterling File Gateway User Interface (CVE-2021-20489)
Summary IBM Sterling File Gateway had addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-20489 DESCRIPTION: IBM Sterling File Gateway is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a...
Security Bulletin: Information Disclosure Vulnerabilty Affects IBM Sterling File Gateway User Interface (CVE-2021-20552)
Summary IBM Sterling File Gateway has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-20552 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This...
Security Bulletin: Access Control Vulnerability Affects myfilegateway User Interface of IBM Sterling File Gateway (CVE-2021-20561)
Summary IBM Sterling File Gateway has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-20561 DESCRIPTION: IBM Sterling File Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...
Security Bulletin: Access Control Vulnerability Affects Myfilegateway User Interface of IBM Sterling File Gateway (CVE-2021-20584)
Summary IBM Sterling File Gateway has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-20584 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to upload arbitrary files, caused by improper access controls. CVSS Base score: 6.5 CVSS Temporal Score: See...
CVE-2021-20552
IBM Sterling File Gateway 6.0.0.0 through 6.1.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 199170...
IBM Sterling File Gateway 代码问题漏洞
IBM Sterling File Gateway is an application for transferring files between internal and external partners, allowing you to more securely and reliably transfer files with trading partners.IBM Sterling File Gateway versions 2.2.0.0-5.2.6.54, 6.0.0.0-6.0.0.6, 6.0 .1.0-6.0.3.4, and 6.1.0.0-6.1.0.2...
IBM Sterling File Gateway 跨站请求伪造漏洞
IBM Sterling File Gateway is an application for transferring files between internal and external partners, allowing you to more securely and reliably transfer files with trading partners.IBM Sterling File Gateway versions 2.2.0.0-5.2.6.53, 6.0.0.0-6.0.0.6, 6.0 .1.0-6.0.3.4, and 6.1.0.0-6.1.0.3...
CVE-2021-20376
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568...
IBM Sterling File Gateway 信息泄露漏洞
IBM Sterling File Gateway is an application for transferring files between internal and external partners, allowing you to more securely and reliably transfer files with trading partners.An information disclosure vulnerability exists in IBM Sterling File Gateway version 6.0.1.0-6.1.0.2. An attack...