CVE-2020-4259

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the…

Medium · published May 14, 2020

CVSS v3.0
6.5
EPSS
1%
Percentile
54.8
In the wild
Unconfirmed
What it is

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the cookie to access functionality not authorized to. IBM X-Force ID: 175638.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/UI:N/S:U/C:N/PR:L/A:N/AC:L/I:H/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00759 · 54.8th percentile
Published
2020-05-14T15:50Z
EPSS history
Timeline
  • 14 MAY 15:50Z
    IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the…
    cvelistv5