CVE-2021-20473: IBM Sterling File Gateway

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 196944.

Affected products

• IBM Sterling File Gateway: from 2.2.0.0, up to and including 5.2.6.5_3; from 6.0.0.0, up to and including 6.0.3.4; from 6.1.0.0, up to and including 6.1.0.1

Published 2021-10-07. Last modified 2026-06-17.