Security Bulletin: Permission security vulnerability exists in IBM Sterling File Gateway (CVE-2020-4259)

Summary IBM Sterling File Gatway has addressed permission security vulnerability Vulnerability Details CVEID: CVE-2020-4259 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated user could manipulate cookie information and remove or add modules from the cookie to access functionalit...

CVE-2020-4259

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the cookie to access functionality not authorized to. IBM X-Force ID: 175638...

CVE-2020-4259

CVE-2020-4259 affects IBM Sterling File Gateway. The issue allows an authenticated user to manipulate cookie information and add/remove modules in the cookie, enabling access to functionality not authorized. Affected versions are 2.2.0.0–2.2.6.5_1 and 6.0.0.0–6.0.3.1. IBM assigns a CVSS v3.0/3.1 ...