Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-20376 EUVD-2021-7794GHSA-6ww2-4r5v-mm62

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observ…

Published Oct 7, 2021 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Sterling File Gateway

Description

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568.

Affected products

VendorProductAffectedFixed
IBM Sterling File Gateway 2.2.0.0, 6.0.0.0, 5.2.6.5_3, 6.0.3.4, 6.1.0.0, 6.1.0.1 —

References