CVE-2021-20584
First published: Wed Oct 06 2021(Updated: )
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 199397.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Sterling B2B Integrator | >=2.2.0.0<=5.2.6.5_4 | |
| IBM Sterling B2B Integrator | >=6.0.0.0<=6.0.0.6 | |
| IBM Sterling B2B Integrator | >=6.0.1.0<=6.0.3.4 | |
| IBM Sterling B2B Integrator | >=6.1.0.0<=6.1.0.2 | |
| <=2.2.0.0 - 5.2.6.5_4 | ||
| <=6.0.0.0 - 6.0.0.6, 6.0.1.0 - 6.0.3.4 | ||
| <=6.1.0.0 - 6.1.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-20584.
What is the title of this vulnerability?
The title of this vulnerability is 'IBM Sterling File Gateway could allow a remote attacker to upload arbitrary files caused by improper access controls.'
What is the severity rating of CVE-2021-20584?
The severity rating of CVE-2021-20584 is 7.5 (high).
Which software versions are affected by this vulnerability?
The affected software versions are IBM Sterling File Gateway 2.2.0.0 - 5.2.6.5_4, 6.0.0.0 - 6.0.0.6, 6.0.1.0 - 6.0.3.4, and 6.1.0.0 - 6.1.0.2.
How can I patch this vulnerability?
You can patch this vulnerability by applying the relevant fix provided by IBM. Please refer to the vendor's support page for more information.
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/author
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/tags
- agent/event
- agent/trending
- vendor/ibm
- canonical/ibm sterling b2b integrator
- version/ibm sterling b2b integrator/2.2.0.0
- version/ibm sterling b2b integrator/5.2.6.5_4
- version/ibm sterling b2b integrator/6.0.0.0
- version/ibm sterling b2b integrator/6.0.0.6
- version/ibm sterling b2b integrator/6.0.1.0
- version/ibm sterling b2b integrator/6.0.3.4
- version/ibm sterling b2b integrator/6.1.0.0
- version/ibm sterling b2b integrator/6.1.0.2
- canonical/ibm sterling file gateway
- version/ibm sterling file gateway/2.2.0.0 - 5.2.6.5_4
- version/ibm sterling file gateway/6.0.0.0 - 6.0.0.6, 6.0.1.0 - 6.0.3.4
- version/ibm sterling file gateway/6.1.0.0 - 6.1.0.2