CVE-2021-20372: Medium severity IBM Sterling File Gateway vulnerability

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2021-20372.

Q: What is the severity of CVE-2021-20372?

The severity of CVE-2021-20372 is medium.

Q: How does CVE-2021-20372 impact IBM Sterling File Gateway?

CVE-2021-20372 allows a remote authenticated user to cause a denial of another user's service due to insufficient permission checking in IBM Sterling File Gateway.

Q: Which versions of IBM Sterling File Gateway are affected by CVE-2021-20372?

IBM Sterling File Gateway versions 2.2.0.0 through 6.1.1.0 are affected by CVE-2021-20372.

Q: How can I fix CVE-2021-20372?

To fix CVE-2021-20372, apply the appropriate patches provided by IBM.

Published Oct 7, 2021

Updated

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking. IBM X-Force ID: 195518.

Other sources

IBM Sterling File Gateway could allow a remote authenticated user to cause a denial of another user's service due to insufficient permission checking.

Affected Software

7 affected componentsFixes available

IBM Sterling File Gateway<=2.2.0.0 - 5.2.6.5_3

IBM Sterling File Gateway<=6.0.0.0 - 6.0.0.6, 6.0.1.0 - 6.0.3.4

IBM Sterling File Gateway<=6.1.0.0 - 6.1.0.1

IBM Sterling B2B Integrator>=2.2.0.0<=5.2.6.5_3

IBM Sterling B2B Integrator>=6.0.0.0<=6.0.0.6

IBM Sterling B2B Integrator>=6.0.1.0<=6.0.3.4

IBM Sterling B2B Integrator>=6.1.0.0<=6.1.0.1

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6496805

Event History

Oct 7, 2021

CVE Published

via MITRE·06:05 PM

Data Sourced

via MITRE·06:05 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6496805

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2021-20372.

What is the severity of CVE-2021-20372?