Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: IBM Sterling Secure Proxy — ibm.com/support/pages/node/6890663 Clear all filters
TI-2022-15262 CVE-2022-34362 · GHSA-h63x-q57p-mpgf

IBM Sterling Secure Proxy HOST header injection

Priority LOW 21

IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00365 Published 2023-02-08 No fix listed CWE-79
TI-2022-16168 CVE-2022-35720 · GHSA-j98c-p6qv-fm8c

IBM Sterling External Authentication Server information disclosure

Priority LOW 24

IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms during installation that could allow a local attacker to decrypt sensitive informat…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00119 Published 2023-02-08 No fix listed CWE-327