CVE-2021-20376: Medium severity ibm sterling file gateway vulnerability

Q: What is CVE-2021-20376?

CVE-2021-20376 is a vulnerability in IBM Sterling File Gateway that could allow an authenticated attacker to enumerate usernames.

Q: How does CVE-2021-20376 affect IBM Sterling File Gateway?

CVE-2021-20376 affects IBM Sterling File Gateway versions 2.2.0.0 through 6.1.1.0.

Q: What is the severity of CVE-2021-20376?

CVE-2021-20376 has a severity rating of 4.3 (medium).

Q: How can an attacker exploit CVE-2021-20376?

An authenticated attacker can exploit CVE-2021-20376 to enumerate usernames by exploiting an observable discrepancy in returned messages.

Q: Is there a patch available for CVE-2021-20376?

Yes, a patch is available for CVE-2021-20376. You can find it on IBM's support website.

Published Oct 7, 2021

Updated

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568.

Other sources

IBM Sterling File Gateway could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages.

Affected Software

6 affected componentsFixes available

IBM Sterling File Gateway<=2.2.0.0 - 5.2.6.5_3

IBM Sterling File Gateway<=6.0.0.0 - 6.0.3.4

IBM Sterling File Gateway<=6.1.0.0 - 6.1.0.1

IBM Sterling B2B Integrator>=2.2.0.0<=5.2.6.5_3

IBM Sterling B2B Integrator>=6.0.0.0<=6.0.3.4

IBM Sterling B2B Integrator>=6.1.0.0<=6.1.0.1

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6496789

Event History

Oct 7, 2021

CVE Published

via MITRE·06:05 PM

Data Sourced

via MITRE·06:05 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6496789

Frequently Asked Questions

What is CVE-2021-20376?