2.3
Low
CVE-2022-35720 IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected…
Description
IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms during installation that could allow a local attacker to decrypt sensitive information. IBM X-Force ID: 231373.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sterling External Authentication Server | 6.1.0 | No fix stated |
| Sterling Secure Proxy | 6.0.3 | No fix stated |
Other CVEs of Sterling External Authentication Server
The 4 CVEs of Sterling External Authentication Server →
CVE-2022-22349
IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not…
4.3
Medium
CVE-2020-4462
IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0,…
8.2
High
CVE-2013-0517
A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and…
Not rated