CVE-2021-39086
First published: Thu Aug 11 2022(Updated: )
IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 215889.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Sterling File Gateway | <=6.0.0.0 - 6.0.3.5 | |
| IBM Sterling File Gateway | <=6.1.0.0 - 6.1.0.4 | |
| IBM Sterling File Gateway | <=6.1.1.0 - 6.1.1.1 | |
| IBM Sterling File Gateway | >=6.0.0.0<6.0.3.6 | |
| IBM Sterling File Gateway | >=6.1.0.0<6.1.0.5 | |
| IBM Sterling File Gateway | >=6.1.1.0<6.1.1.2 | |
| HP HP-UX | ||
| IBM AIX | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Oracle Solaris |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this IBM Sterling File Gateway vulnerability?
The vulnerability ID for this IBM Sterling File Gateway vulnerability is CVE-2021-39086.
What is the severity of the IBM Sterling File Gateway vulnerability?
The severity of the IBM Sterling File Gateway vulnerability is medium with a severity value of 5.3.
How can a remote attacker exploit the IBM Sterling File Gateway vulnerability?
A remote attacker can exploit the IBM Sterling File Gateway vulnerability to obtain sensitive information when a detailed technical error message is returned in the browser.
Which versions of IBM Sterling File Gateway are affected by this vulnerability?
IBM Sterling File Gateway versions 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 are affected by this vulnerability.
How can I fix the IBM Sterling File Gateway vulnerability?
To fix the IBM Sterling File Gateway vulnerability, apply the necessary patches provided by IBM.
- collector/nvd-index
- agent/type
- agent/event
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm sterling file gateway
- version/ibm sterling file gateway/6.0.0.0
- version/ibm sterling file gateway/6.1.0.0
- version/ibm sterling file gateway/6.1.1.0
- vendor/hp
- canonical/hp hp-ux
- canonical/ibm aix
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- vendor/oracle
- canonical/oracle solaris
- version/ibm sterling file gateway/6.0.0.0 - 6.0.3.5
- version/ibm sterling file gateway/6.1.0.0 - 6.1.0.4
- version/ibm sterling file gateway/6.1.1.0 - 6.1.1.1