CVE-2020-4654 Information disclosure in Sterling File Gateway

What is CVE-2020-4654?

CVE-2020-4654 is a low-severity vulnerability in Ibm Sterling File Gateway, published on 8 Oct 2021. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information due to improper permission control. IBM X-Force ID: 186090.

Which versions are affected by CVE-2020-4654?

It affects 1 product.

Products include Ibm Sterling File Gateway.

How do I fix CVE-2020-4654?

No fix has been published for CVE-2020-4654 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-4654 being exploited?

There is no known exploitation of CVE-2020-4654 in the wild and no public exploit code.

Other vulnerabilities in Ibm Sterling File Gateway

• CVE-2020-4259 Missing authorization in Sterling File Gateway Medium 6.5
• CVE-2017-1550 Missing authorization in Sterling File Gateway Medium 6.5
• CVE-2017-1487 Information disclosure in Sterling File Gateway Medium 6.5
• CVE-2023-52292 IBM Sterling File Gateway cross-site scripting Medium 6.4
• CVE-2021-20473 Auth bypass in Sterling File Gateway Medium 6.3

All Ibm Sterling File Gateway vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-8wh5-vrc5-qrvj.