VULNERABILITY INTELLIGENCE

CVE-2020-4259

CVSS score6.5 MEDIUM
EPSS probability0.76%
CISA KEVNot currently listed
Published2020-05-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the cookie to access functionality not authorized to. IBM X-Force ID: 175638.

Weakness classification

  • CWE-276: Incorrect Default Permissions

Primary references