CVE-2020-4654: IBM Sterling File Gateway

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information due to improper permission control. IBM X-Force ID: 186090.

Affected products

• IBM Sterling File Gateway: from 2.2.0.0, before 5.2.6.5_4 (fixed in 5.2.6.5_4); from 6.0.0.0, before 6.0.3.5 (fixed in 6.0.3.5); from 6.1.0.0, before 6.1.0.2 (fixed in 6.1.0.2)

Published 2021-10-08. Last modified 2026-06-17.