5.5

CVE-2023-32338

IBM Sterling Secure Proxy information disclosure

IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access.  IBM X-Force ID:  255585.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Sterling Secure Proxy Version 6.0.3
Ibm ≫ Sterling Secure Proxy Version 6.1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.077
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
IBM 5.1 1.4 3.6
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

https://exchange.xforce.ibmcloud.com/vulnerabilities/255585
Vendor Advisory
VDB Entry
https://https://www.ibm.com/support/pages/node/7029765
Broken Link
https://www.ibm.com/support/pages/node/7029766
Vendor Advisory
https://www.ibm.com/support/pages/node/7029765
Vendor Advisory