Vulnerability in Ibm Sterling File Gateway
CVE-2020-4259
IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the cookie to access functionality not authorized to. IBM X-Force ID: 175638.
EPSS: 0.001 (27.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/UI:N/S:U/C:N/PR:L/A:N/AC:L/I:H/RC:C/RL:O/E:U.
Affected products
- Ibm Sterling File Gateway — versions 2.2.0.0, 6.0.3.1
References
- www.ibm.com/support/pages/node/6208038 (x_refsource_CONFIRM)
- ibm-sterling-cve20204259-sec-bypass (175638) (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2020-4259?
- CVE-2020-4259 is a medium-severity vulnerability in Ibm Sterling File Gateway. CVSS score: 6.5/10. Published 2020-05-14.
- How severe is CVE-2020-4259?
- Medium severity. CVSS v3 base score is 6.5 out of 10.