medium6.5
CVE-2021-20473
IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonat…
Impact
IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 196944.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Sterling File Gateway | from 2.2.0.0 through 5.2.6.5_3 from 6.0.0.0 through 6.0.3.4 from 6.1.0.0 through 6.1.0.1 |