← back
CVE-2021-20376

CVE-2021-20376

CVSS 4.3 MEDIUMEPSS 0.7%
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.3EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
07 Oct 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568.
CVSS:3.0/I:N/AC:L/PR:L/AV:N/UI:N/A:N/C:L/S:U/RL:O/E:U/RC:C
Affected products
IBM · Sterling File Gateway
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/195568https://www.ibm.com/support/pages/node/6496789