NetSight
medium6.5

CVE-2021-20473

IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonat…

Impact

IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 196944.

Affected products

VendorProductAffected versions
IbmSterling File Gateway
from 2.2.0.0 through 5.2.6.5_3
from 6.0.0.0 through 6.0.3.4
from 6.1.0.0 through 6.1.0.1

Weakness classification

References