CVE-2020-4259 in Sterling File Gateway

الملخص

بحسب MITRE

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the cookie to access functionality not authorized to. IBM X-Force ID: 175638.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: IBM Corporation
• حجز: 30/12/2019
• الاعتدال: تمت الموافقة
• إدخال: VDB-155293
• CPE: جاهز
• CWE: CWE-269 (مؤكد)
• CVSS: 6.5 (NVD)
• EPSS: 0.00759
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Insurance, Police, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-4259
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-4259
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-4259/