4.3
Medium
CVE-2021-20376 IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to…
Description
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sterling File Gateway 6.1 | 6.1.0.0 → 6.1.0.1 | No fix stated |
| Sterling File Gateway 6.0 | 6.0.0.0 → 6.0.3.4 | No fix stated |
| Sterling File Gateway | 2.2.0.0 | No fix stated |
Other CVEs of Sterling File Gateway
The 67 CVEs of Sterling File Gateway →
CVE-2026-75878
IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated…
9.1
Critical
CVE-2026-19273
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File…
5.4
Medium
CVE-2026-19290
IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote…
7.5
High
CVE-2025-36431
IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.0_1 is…
5.4
Medium