4.3
Medium
CVE-2022-22349 IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not…
Description
IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not properly validating RESTAPI configuration data. An authorized user could import invalid data which could be used for an attack. IBM X-Force ID: 220144.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sterling External Authentication Server 6.0 | 6.0.2.0 → 6.0.3.0 | No fix stated |
| Sterling External Authentication Server | 3.4.3.2 | No fix stated |
Other CVEs of Sterling External Authentication Server
The 4 CVEs of Sterling External Authentication Server →
CVE-2022-35720
IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected…
2.3
Low
CVE-2020-4462
IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0,…
8.2
High
CVE-2013-0517
A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and…
Not rated