CVE-2020-4259

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-05-14 · updated 2026-06-17
Weakness: CWE-276

Description

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the cookie to access functionality not authorized to. IBM X-Force ID: 175638.

Affected products

IBM Sterling File Gateway: from 2.2.0.0 through 2.2.6.5_1; from 6.0.0.0 through 6.0.3.1

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/175638
https://www.ibm.com/support/pages/node/6208038
https://exchange.xforce.ibmcloud.com/vulnerabilities/175638
https://www.ibm.com/support/pages/node/6208038

Get alerted when CVE-2020-4259 or the next vulnerability affects your stack