CVE-2021-20473

No fix known EPSS <1%CVSS 6.3

IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 196944.

Published 2021-10-07 · CVE record · OSV

Products: ibm sterling_file_gateway