6.5
Moyenne
CVE-2022-22333 IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a…
Description
IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, due to the Jetty based GUI in the Secure Zone not properly validating the sizes of the form content and/or HTTP headers submitted. A local attacker positioned inside the Secure Zone could submit a specially crafted HTTP request to disrupt service. IBM X-Force ID: 219133.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sterling Secure Proxy 6.0 | 6.0.2.0 → 6.0.3.0 | Pas de correctif indiqué |
| Sterling Secure Proxy | 3.4.3.2 | Pas de correctif indiqué |
Autres CVE de Sterling Secure Proxy
Les 19 CVE de Sterling Secure Proxy →
CVE-2026-75792
IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative…
4.3
Moyenne
CVE-2026-78415
IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and…
5.4
Moyenne
CVE-2024-51453
IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow a remote attacker to traverse directories on the system
4.3
Moyenne
CVE-2024-38341
IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0 through 6.1.0.0, and 6.2.0.0 through 6.2.0.1 uses weaker than…
5.9
Moyenne